Patrick Domingues

If you did not know already, a Zero Trust security model is based on the creation of zones and segmentation to control sensitive IT resources. This also entails the deployment controls to monitor and manage data between zones, and more importantly, user interactions within a zone(s).

Based on the Forrester Research the Zero Trust Model of information security is built on the assumption that any person or device with access to an organization’s data is a threat to the enterprise. Zero Trust protects sensitive data by limiting access to only those who require it and strictly enforcing access through intelligent access control and network segmentation.

5 Points To Success In A Zero Trust Model

Here are 5 essential steps to establish a successful Zero Trust Model in your organization or for your clients. 

1. Identify your sensitive data at rest and in motion
   • Perform data discovery and classification
   • Segment and zone the network based on data classification
2. Map the acceptable routes for sensitive data access and egress
   • • Classify all resources involved in the electronic exchange of sensitive data
     • Evaluate the workflow of data and redesign, if necessary
     • Verify the existing workflows for PCI and HIPAA compliance
       
       
3. Architect zero trust zones
   • Define the zones and create segmentation around sensitive data
   • Enforce segmentation using physical and virtual security controls
   • Establish access based controls to the zone designs
   • Automate rule and access policy baselines
   • Audit and log all access and change control model in place which can seemly integrate with your environment. 
     
     
4. Monitor the zero trust environment, in detail, with security analytics
   • Leverage existing Analytics already in place if any. 
   • Determine the best placement for your security analytics software.
   • Establish a Vendor pool that has the Zero Trust
     
     
5. Embrace security automation and adaptive response

• • Translate business process into technology automation
  • Document, assess, and test security operation policies and procedures for effectiveness and response
  • Verify the security tools and solutions in place within your environment 

Conclusion 

This framework essentially establishes a model of trust, verification, and continuous evaluation of trust for further access and lateral movement which is ideal to spot unwanted anomalies in the network and in turn provide Success In A Zero Trust Model.

• Automating System Updates with Unattended-Upgrades on Ubuntu
• How to Add a Large Disk Partition as Storage in Proxmox VE
• How to Remove Radmin Viewer with PowerShell
• How to Automate Ubuntu Server System Updates and Package Installation
• Introducing Zevonix: Your Pathway to Smarter IT

Patrick Domingues

See Full Bio