Zero Trust is coming - are you prepared?

[Caute_cautim]

Hi All

An interesting piece by an Australian Technology Journalist, he has the right idea, but full of myths and half truths as usual.

https://ia.acs.org.au/content/ia/article/2021/zero-clue-about-zero-trust--.html?ref=newsletter

Regards

Caute_Cautim

[CraginS]

Recommended readings:

NIST (2020) SP 800-207 Zero Trust Architecture, (59pp)
https://doi.org/10.6028/NIST.SP.800-207

Department of Defense (DOD) Zero Trust Reference Architecture, V. 1.0 (2021) (170 pp)
https://dodcio.defense.gov/Portals/0/Documents/Library/(U)ZT_RA_v1.1(U)_Mar21.pdf

NSA (2021), Embracing a Zero Trust Security Model, v. 1.0, (7 pp)
https://media.defense.gov/2021/Feb/25/2002588479/-1/-1/0/CSI_EMBRACING_ZT_SECURITY_MODEL_UOO115131-2...

CISA Zero Trust Maturity Model DRAFT 2021 (19 pp)
https://www.cisa.gov/publication/zero-trust-maturity-model

[Caute_cautim]

Hi All

Well Zero Trust has been endorsed by the US Federal Government:

"The Office of Management and Budget on Wednesday released a federal strategy to move the U.S. government toward mature zero trust architectures. White House officials say the new strategy - with a focus on "phishing-resistant" multifactor authentication, asset inventories, traffic encryption and more - is a "key step forward in delivering on President Biden's May 2021 executive order on cybersecurity."

https://www.inforisktoday.com/us-omb-releases-zero-trust-strategy-for-federal-agencies-a-18382?utm_s...

Great news - now the real churn with vendors, myths, and other issues will come out of the woodwork.

Regards

Caute_Cautim