DECEMBER 2022ENTERPRISE SECURITY| | 191. WHAT ARE SOME OF THE MAJOR CHALLENGES AND TRENDS THAT HAS BEEN IMPACTING THE ZERO TRUST SECURITY LATELY?a. Zero trust security is the concept of "Always verify, Never trust" approach for network security. Essentially, ensuring that every user device is always verified, regardless of whether they've had previously been granted access. Zero trust security is the modern-day approach to protecting your network and organizations data. Outside of being one of the newest buzz words in cyber security, successfully implementing Zero trust isn't a turnkey solution (1) and requires a holistic approach to essentially start from the ground up. Deploying Zero trust can pose major challenges for firms as it's not a set it and forget solution. Locking down your network would be ideal but relies heavily on the ability to identify users, devices, deploying monitoring tools, setting up access controls, patching devices, and consistent management to reduce hidden gaps in protecting you network. b. Implementing zero trust needs to be a gradual to overcome deployment obstacles such as ongoing management (2). Zero trust is an approach, which calls for ongoing management to ensure ongoing protection. Zero trust adds enhanced security but can also impact staff performance (3). Potential for losing productivity comes with the need to continuously monitor and manage security settings. Adjusting firewall setting and access may enhance security but inadvertently lock out an entire department, which hinder the ability for workers to preform optimally.c. Zero Trust security depends on secure hardware (4) to operate efficiently, part of implementing a zero-trust security framework involves securing your hardware. Patching and updating your existing boxes or deploying new devices altogether. Lastly, Zero Trust calls for flexible software (5). Organizations will have varying security solutions deployed and will often run into challenges with managing everything. Zero trust is an all-encompassing approach which provide added protection but also require more overhead to manage. Jonathan Sanchez is the Chief Information Security Officer at Airbus SLC, México and has previously worked as a senior consultant at Deloitte, México. Jonathan SanchezCISO INSIGHTSBy Jonathan Sanchez, CDPSE, Chief Information Security Officer, TRC CompaniesTHE IMPORTANCE OF ZERO TRUST SECURITY
< Page 9 | Page 11 >