4 ms·

Zero trust, it’s not that you don’t trust your staff —- it’s that you don’t need to.

• MattPalmer1086 5y ago
  Zero trust essentially means you don't have internal trusted networks, so everything works as if it was on the internet, and is protected and authenticated appropriately. It has nothing to do with whether you trust your staff or not. In fact, you should not trust your staff from a security perspective, insider attacks are a valid threat. This is true regardless of whether you use a zero trust architecture or not.
  • aaaaaaaaata 5y ago
    > insider attacks are a valid threat. Especially if their machine's compromised.
    • MattPalmer1086 5y ago
      Technically, that isn't an insider attack. It's an external threat actor who is using the access provided by the compromised machine of the (presumably innocent) insider. Still a valid threat, just not an insider threat.
• pyuser583 5y ago
  It means “trust, but verify”.