{"id":7860,"date":"2022-01-19T13:55:57","date_gmt":"2022-01-19T13:55:57","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7860"},"modified":"2022-01-19T13:55:58","modified_gmt":"2022-01-19T13:55:58","slug":"zero-trust-security-model","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/zero-trust-security-model\/","title":{"rendered":"Never Trust, Always Verify: The Benefits of Zero Trust Security Model"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7860\" class=\"elementor elementor-7860\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><span style=\"font-weight: 400;\">Zero trust is one of the most celebrated concepts in cybersecurity right now. The basic tenet of zero trust architecture is &#8211; trust nothing, always authenticate in order to protect the network. We explore what is a zero trust security model, the benefits of adopting it, and how to implement a zero trust architecture in an organisation.<\/span><\/p><h2><span style=\"font-weight: 400;\">What is zero trust security model?<\/span><\/h2><p><span style=\"font-weight: 400;\">The <\/span><a href=\"https:\/\/www.ncsc.gov.uk\/blog-post\/zero-trust-is-it-right-for-me\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">zero trust security model<\/span><\/a><span style=\"font-weight: 400;\"> treats all users, devices, and resources as untrustworthy, regardless of who or what they are, or whether they are connecting to a system from within the network. Each resource within the network is treated as a separate entity that must be successfully authenticated to before users can access it.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">Zero trust security is in contrast to traditional security models which focus on creating a secure perimeter and implicitly trust any account within that perimeter without any need to re-validate them, which makes it difficult to track a malicious actor through the network. Furthermore, as more and more organisations undergo digital transformations and migrate their network to the cloud, the traditional concept of the perimeter has been severely challenged, making zero trust a good choice for many organisations.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">In a zero trust security model, every user and device is challenged to prove they are legitimate in order to carry out any action within the perimeter, from accessing systems to removing data. Lateral movement across the network is restricted, and the zero trust model creates a more secure environment that protects against unauthorised access to sensitive data and digital assets.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">The zero trust security model contains several key elements, including granular security controls, strong authentication methods, network segregation, and controls against lateral movement.<\/span><\/p><h2><span style=\"font-weight: 400;\">Zero trust security model principles<\/span><\/h2><p><span style=\"font-weight: 400;\">A zero trust security model follows the idea that no network can be trusted, including the organisation\u2019s own network. The creator of a zero trust architecture will need to utilise these principles:<\/span><\/p><p>\u00a0<\/p><p><b>Continuously monitor and validate everyone<\/b><\/p><p><span style=\"font-weight: 400;\">Zero trust security models work on the assumption that anyone could be a malicious user whether they are from within or without the network. As a result, continuous monitoring, inspection, and logging of all traffic and activities is required to keep the network safe. This continuous monitoring will enable systems to verify user identity, privileges, device identity, and security at all times.<\/span><\/p><p>\u00a0<\/p><p><b>Require authentication and authorisation throughout the network<\/b><\/p><p><span style=\"font-weight: 400;\">A zero trust security model breaks the network into many segments and creates access gates between every segment and for every application or resource within it. Every user (individual, device, and infrastructure component) is treated as suspicious until it can be verified.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">The zero trust security model encourages the use of <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/secure-passwords-dont-protect-network-security\/\"><span style=\"font-weight: 400;\">multi factor authentication<\/span><\/a><span style=\"font-weight: 400;\"> as it strengthens the authentication process for users to access the network and individual systems, ensuring that only authorised users can access the network in the first place.<\/span><\/p><p>\u00a0<\/p><p><b>Follow the principle of least privilege<\/b><\/p><p><span style=\"font-weight: 400;\">The principle of least privilege argues that users, devices, and systems must only be given access to the data and services they require in order to do their jobs. In a zero trust network, access is only allowed on an absolutely necessary basis, and when the request to access a system can be verified.<\/span><\/p><p>\u00a0<\/p><p><b>Know what and who is allowed in the network<\/b><\/p><p><span style=\"font-weight: 400;\">All policies within a zero trust architecture should be as granular as possible. As a result, organisations will need to ensure that they know every component of the network\u2019s architecture well to identify key resources, risks to the architecture, and who the users are.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">Users on the network can include individuals (usually collectively known as users), applications, and infrastructure (including routers, switches, cloud components, and suppliers). Every user must be uniquely identifiable in order to navigate a zero trust architecture.<\/span><\/p><p>\u00a0<\/p><p><b>Separate the network into microsegments<\/b><\/p><p><span style=\"font-weight: 400;\">Reducing security perimeters into small zones and requiring verification to move between those zones limits lateral access throughout the network. This means that even if a malicious actor is able to access one segment, they are unable to move to a different segment, and they are denied access to sensitive information. Ultimately microsegmentation minimises the impact should a breach occur.<\/span><\/p><p>\u00a0<\/p><p><b>Restrict lateral movement across the network<\/b><\/p><p><span style=\"font-weight: 400;\">In a traditional perimeter network security model there are no internal access gates, and traffic can roam freely once it is within the perimeter. This makes it difficult to detect where a malicious actor is within the network.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">In the zero trust security model, attackers can\u2019t move laterally around the network because the network is divided into segments, and there are access gates to move from one segment to another. This allows the organisation to detect where the attacker is in the network, and cut the attacker off from the rest of the network.<\/span><\/p><h2><span style=\"font-weight: 400;\">The benefits of a zero trust security model<\/span><\/h2><p><span style=\"font-weight: 400;\">The zero trust security model relies heavily on tools to implement it, and as such requires significant investment and resources to monitor and maintain the system. However, zero trust architecture ultimately creates a far more secure environment, with significant benefits for organisations.<\/span><\/p><p>\u00a0<\/p><p><b>Protection against attack<\/b><\/p><p><span style=\"font-weight: 400;\">Organisations are experiencing frequent and increasingly severe cyber attacks including ransomware, supply chain attacks, and insider threats. The main components of zero trust such as strong user authentication, <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">network segmentation<\/span><\/a><span style=\"font-weight: 400;\">, and continuous monitoring are important elements of an effective cybersecurity programme.<\/span><\/p><p>\u00a0<\/p><p><b>Reduces risk by creating smaller attack surfaces<\/b><\/p><p><span style=\"font-weight: 400;\">In a zero trust architecture users are connected directly to the applications and systems they require, not the entire network. This smaller connection represents a smaller attack surface as an attacker can only access that one system and is prevented from moving laterally across the wider network.<\/span><\/p><p>\u00a0<\/p><p><b>Provides access control over cloud environments<\/b><\/p><p><span style=\"font-weight: 400;\">Digital transformation and migrations to the cloud have changed how the perimeter operates, and <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/cloud-security\/\"><span style=\"font-weight: 400;\">cloud security<\/span><\/a><span style=\"font-weight: 400;\"> is a sometimes uneasy alliance between cloud service providers and the organisation.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">With a zero trust architecture, security policies apply directly to the user requesting access, and therefore keeps security as close as possible to the assets that are being protected. This way, assets are protected by the authentication of the user.\u00a0<\/span><\/p><p>\u00a0<\/p><p><b>Secures remote working<\/b><\/p><p><span style=\"font-weight: 400;\">Remote or hybrid working patterns create insecurity for organisations as employees log into the network from outside the organisation\u2019s safe space. Zero trust security\u2019s strong emphasis on authentication and authorisation allows organisations to extend the corporate network into remote locations, protecting the network.<\/span><\/p><p>\u00a0<\/p><p><b>Improved monitoring and alerting<\/b><\/p><p><span style=\"font-weight: 400;\">The range of tools that make up a zero trust security model include tools such as SIEM systems, security orchestration automation and response systems, and network detection and response systems. These automated tools will notify organisations of any unauthorised activity, and maintain logs to aid event analysis, all of which will allow them to identify security issues quickly, and begin their incident response.<\/span><\/p><p>\u00a0<\/p><p><b>Improves user experience through single sign on<\/b><\/p><p><span style=\"font-weight: 400;\">The zero trust security model encourages the use of single sign on (SSO). With SSO, users only enter credentials once, making the entire system more usable and enables users to create (and remember) only one password at a time, encouraging stronger, <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/secure-passwords-dont-protect-network-security\/\"><span style=\"font-weight: 400;\">more secure passwords<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p><p>\u00a0<\/p><p><b>Enables a streamlined, holistic approach to security policy creation<\/b><\/p><p><span style=\"font-weight: 400;\">In a traditional model, security policies are created for and applied to each security system and area of the network in their own silos. The overarching zero trust security model encourages a more holistic approach to security policies across the network, and enables universal policies implemented end to end across the network.<\/span><\/p><h2><span style=\"font-weight: 400;\">Working towards a zero trust security model<\/span><\/h2><p><span style=\"font-weight: 400;\">Zero trust security architecture is estimated to <\/span><a href=\"https:\/\/venturebeat.com\/2021\/11\/26\/report-zero-trust-architecture-is-expected-to-increase-cybersecurity-efficacy-by-144\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">improve the effectiveness<\/span><\/a><span style=\"font-weight: 400;\"> of an organisation\u2019s information security programme by up to 144%. While implementing a <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">zero trust architecture<\/span><\/a><span style=\"font-weight: 400;\"> may seem like a daunting task, it is undeniable that it has significant benefits in today\u2019s challenging environment of remote working, cloud services, and cyber attacks.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">Stay safe<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Zero trust is one of the most celebrated concepts in cybersecurity right now. The basic tenet of zero trust architecture is &#8211; trust nothing, always authenticate in order to protect the network. We explore what is a zero trust security model, the benefits of adopting it, and how to implement a zero trust architecture in&hellip;<\/p>\n","protected":false},"author":10,"featured_media":7898,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7860"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7860"}],"version-history":[{"count":0,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7860\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/7898"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7860"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7860"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7860"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}