The Zero Trust is fairly new concept in Cyber and Information Security provision that requires proper understanding of organizational policies and technology infrastructure, as well as business application processes. What are the best practices in implementing, managing and monitoring the Zero Trust policies in your organization?
Dear Eduard,
Its very interesting question and its seems many CEO's are considering the Zero Trust Policies in their enterprises.
The launcher of this concepts says ' The Zero Trust Model of information security simplifies how information security is conceptualized by assuming there are no longer “trusted” interfaces, applications, traffic, networks or users. It takes the old model — “trust but verify” — and inverts it, since recent breaches have proven when an organization trusts, it doesn’t verify.
Some of the most common guidelines and recommendation proposed by Cymbel are :
1- Balance Budget across Prevention, Detection, and Response Controls.
2- Use a Kill Chain model to select technical controls.
3- Update Network Security with Next Generation Firewalls.
4- Use a “sandbox” control to detect unknown threats in files.
5- Establish Protected Enclaves to control user access to applications and resources.
6- Use a specialized anti-phishing email protection service.
7- Use Threat Intelligence to prioritize vulnerability remediation.
8- Analyze logs using advanced machine learning algorithms to detect compromised and malicious users.
9- Implement an Incident Management system to minimize incident cost.
10- Deploy a Cloud Services Manager to discover, analyze, and control Shadow IT.
11- Deploy a backup, cloud-based DDoS Mitigation Service.
12- Deploy a non-signature-based endpoint malware detection control.
13- Monitor your partners’ security postures using a cloud-based service.
Many enterprises are considering those guidelines as a golden standard, since they cover all the aspects that may face or threat any enterprise.
Hope this will help you in further understanding...
I do not think we can monitor this in our institutions because the university professor is far from my greetings
In human relationships, I don't think a "zero trust" model is effective. Without trust at some level, humans have no way of communicating with each other. I believe people need to foster a hermeneutic of charity with regard to others rather than a hermeneutic of suspicion, and a zero trust model is a hermeneutic of suspicion run amok.