3 ms·
Zero trust essentially means you don't have internal trusted networks, so everything works as if it was on the internet, and is protected and authenticated appr
by MattPalmer1086 5y ago
Zero trust essentially means you don't have internal trusted networks, so everything works as if it was on the internet, and is protected and authenticated appropriately.
It has nothing to do with whether you trust your staff or not.
In fact, you should not trust your staff from a security perspective, insider attacks are a valid threat. This is true regardless of whether you use a zero trust architecture or not.
- aaaaaaaaata 5y ago> insider attacks are a valid threat. Especially if their machine's compromised.
- MattPalmer1086 5y agoTechnically, that isn't an insider attack. It's an external threat actor who is using the access provided by the compromised machine of the (presumably innocent) insider. Still a valid threat, just not an insider threat.