3 ms·
Zero Trust is the right strategy, but very few have the resources to implement it. So they in spirit do Zero Trust, but end up without basic security controls
by kerng 7y ago
Zero Trust is the right strategy, but very few have the resources to implement it.
So they in spirit do Zero Trust, but end up without basic security controls nor full fledged micro segmentation and identity.
If you work at a startup and experience exponential growth, you know that your internal production network likely has no authentication - this is unfortunately not uncommon and can be dangerous.
What old school security controls prevent, are the script kiddie attacks (ooops, that database or Elastic Search cluster exposed on Internet) and random automation attacks - which there are plenty of examples.
- yjftsjthsd-h 7y ago> So they in spirit do Zero Trust, but end up without basic security controls nor full fledged micro segmentation and identity. Then they're not doing zero trust, they're doing minimal access controls, which is rather the opposite and the problem.
- kerng 7y agoThey have the strategic vision to do zero trust with whatever ships out of box, but not more. Like we use GSuites and have MFA, all our problems are solved because we now are BeyondCorp. That's marketing speak.