Taking the next step with Zero Trust

Parag Patel10-09

How can more organisations move their Zero Trust strategies for the cloud from concept to everyday practice?If you’re familiar with the Zero Trust framework, its principles may seem simple enough in ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2474713852?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2024-10-09 05:09","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2474713852","market":"us","top_or_hot":-1,"title":"Taking the next step with Zero Trust","media":"Parag Patel","content":"<div>\n<p>How can more organisations move their Zero Trust strategies for the cloud from concept to everyday practice?If you’re familiar with the Zero Trust framework, its principles may seem simple enough in ...</p>\n\n<a href=\"https://www.theedgesingapore.com/digitaledge/focus/taking-next-step-zero-trust?utm_source=Blog&utm_medium=RSS&utm_campaign=Tiger_Brokers_app_RSS\">Source Link</a>\n\n</div>\n","source":"edge_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Taking the next step with Zero Trust</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTaking the next step with Zero Trust\n</h2>\n\n<h4 class=\"meta\">\n\n\n2024-10-09 05:09 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.theedgesingapore.com/digitaledge/focus/taking-next-step-zero-trust?utm_source=Blog&utm_medium=RSS&utm_campaign=Tiger_Brokers_app_RSS><strong>Parag Patel</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>How can more organisations move their Zero Trust strategies for the cloud from concept to everyday practice?If you’re familiar with the Zero Trust framework, its principles may seem simple enough in ...</p>\n\n<a href=\"https://www.theedgesingapore.com/digitaledge/focus/taking-next-step-zero-trust?utm_source=Blog&utm_medium=RSS&utm_campaign=Tiger_Brokers_app_RSS\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"CLM","symbol_name":"Cornerstone Strategic Value Fund","start_time":0,"source_url":"https://www.theedgesingapore.com/digitaledge/focus/taking-next-step-zero-trust?utm_source=Blog&utm_medium=RSS&utm_campaign=Tiger_Brokers_app_RSS","article_id":"2474713852","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2474713852","pubTimestamp":1728421743,"sourceInfo":{"source_id":"edge_highlight","name":"Edge"},"weMediaInfo":null,"summary":"How can more organisations move their Zero Trust strategies for the cloud from concept to everyday practice?","collect":0,"end_time":0,"defaultTopTitle":"theedgesingapore.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"CLM":"Cornerstone Strategic Value Fund","SSO":"两倍做多标普500ETF","BK4585":"ETF&股票定投概念","BK4588":"碎股","BK4110":"抵押房地产投资信托","MFA":"MFA Financial"},"translate_title":"在零信任下迈出下一步","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"CLM":1,"MFA":1,"SSO":1},"content_text":"How can more organisations move their Zero Trust strategies for the cloud from concept to everyday practice?If you’re familiar with the Zero Trust framework, its principles may seem simple enough in the context of network security. Nobody — not even your most senior leaders — can be granted user access without first being checked at the gate.\nHere’s the challenge: Traditional perimeters are a thing of the past given the rising adoption of the cloud. Cloud spend in Asia Pacific grew 10% year-on-year, and is forecasted to accelerate at a CAGR of 17.3% from 2024-2027. And with remote access and hybrid work a mainstay of the modern enterprise, cyber threats are challenging your organisation like never before. That’s why the most forward-thinking businesses are implementing Zero Trust.\nOrganisations in Singapore recognise the benefits of adopting the Zero Trust model. But, a recent Entrust survey reveals that while more than half of IT practitioners in Singapore have strong leadership support for Zero Trust, nearly 30% of organisations have yet to begin implementing this security approach. Another half are still at various stages of implementation.\nSo how can more organisations move their Zero Trust strategies from concept to everyday practice?\nApplying Zero Trust principles to the cloud\nThere are several technologies and techniques that help you navigate the Zero Trust journey:\n1. Certificate lifecycle management (CLM)\nCertificate lifecycle management is essential to implementing Zero Trust at scale. Digital certificates are issued to people and devices so that organisations can verify their identities and authorise requests, whether it be to access the network or a specific corporate resource. Digital certificates are also used for strong encryption and access control. With so many certificates in use for so many purposes, CLM allows you to ensure no certificates go unmanaged, and enables you to enforce the principle of least privileged access.\nThere are three important steps in the certificate lifecycle:\n\nIssuance, renewal, and revocation: Certificates can’t be forgotten about, or else you risk opening up a backdoor into your cloud environment. So, security teams must seamlessly manage their lifecycle from start to finish, renewing any that have been authenticated and revoking all that have not.\n\n2. Key and Secrets Lifecycle Management\nKeys and secrets underpin the security of cryptographic processes. Managing their complete lifecycle is critical for comprehensive security.\n\nKey Lifecycle Management: Generate, deliver, and distribute cryptographic keys to a range of supported applications through multiple standard interfaces, including KMIP. Provide access control to keys and enable automated capabilities including key rotation, key expiration, and key revocation.\nSecure Root of Trust: As a foundational element of Zero Trust’s data protection pillar, this enables FIPS-certified cryptographic key generation and lifecycle management with dual controls and separation of duties.\nDecentralised Vault-Based Architecture: Distributed key storage ensures that keys and data are kept within the geographical areas where they are supposed to be maintained to facilitate compliance with geo-fencing and data sovereign regulations.\nCentralised Compliance Management Dashboard: This process enables the documentation of keys and secrets based on templates for continuous compliance assessment using built-in or custom policies.\n\n3. Identity and access management (IAM)\n\nUser identity is the heart of post-perimeter cybersecurity. A robust, feature-rich IAM portfolio is key to securing identities and keeping your most valuable assets protected from compromised credentials, phishing attacks, and other threat vectors. Essential capabilities include:\nStrong authentication: Checking all requests against all possible data points ensures the user identity is verified without any risk signals falling through the cracks. An effective Zero Trust architecture will leverage both risk-based and adaptive authentication methods to provide high assurance and phishing-resistant verification.\nPhishing-resistant multi-factor authentication (MFA): MFA leverages numerous authenticators — tokens, facial recognition, mobile push notifications, and more — to ensure users are who they claim to be. However, not all MFA is the same, as some are vulnerable to bypass attacks. For high-assurance identities, organisations should use certificate-based passwordless authentication for both users and devices.\nPasswordless security: Traditional usernames and passwords are prone to repetition and are much easier to crack when tied to personal information. Zero Trust advocates for passwordless security, which uses cryptographic keys to enable temporary access without burdening users or your IT department.\nSingle-sign-on (SSO): SSO is an access management function that allows a user to login with a single set of credentials for multiple resources. With the right combination of cloud security tools, organisations can build a strong authentication foundation beneath this process, ensuring SSO can’t be taken advantage of for nefarious purposes.\n\nBest practices for implementing Zero Trust\nNow that you know why creating a Zero Trust cloud is important and the tools it takes to get there, let’s talk about the actual implementation process.\nDo note though – Zero Trust isn’t happening overnight. The journey could turn out to be a multi-year endeavour, so it’s best to take a phased approach. You can implement the foundations early, but as an ongoing process, reaching Zero Trust maturity will require continuous effort.\nHere is one approach to how you can start your journey to Zero Trust maturity:\n\nApplication and asset discovery: Before you can adequately secure your environments — in the cloud or otherwise — you need to identify everything within its reach. This step involves taking inventory of your most sensitive data, where it resides, and where it goes. Then, inventory your cryptographic assets, including all hardware, software, and credentials.\nMap transaction flows: Understanding the relationship between cloud applications, systems, servers, networks, devices, users, and third-party cloud providers is important. This step helps you chart how data moves between these elements, how they interact with each other, and determine areas that need the most attention.\nArchitect boundaries: Once you’ve figured out where your most crucial assets are, you can isolate them with additional controls to prevent lateral movement.\nEstablish access control policies: Define context-based rules for how assets can be used, shared, manipulated, etc. A solid access management plan will explicitly outline permissions based on the principle of least privilege.\nMonitoring and maintenance: You can’t set and forget cloud security. Even after you’ve built a robust Zero Trust framework, your security team must regularly monitor user activity for anomalous behaviour. More importantly, it should search high and low for vulnerabilities before hackers have a chance to exploit them.\n\nWork with a partner to secure your cloud environments\nAs cloud environments grow larger and more complicated, traditional network security tools are falling short of the mark. Today’s organisations need more robust, advanced, and automated solutions that establishes the foundation for a future-proof Zero Trust architecture. Partnering with a trusted expert who can guide your Zero Trust implementation both now, and in the future, will better equip you to navigate emerging challenges and cyber threats.\n Parag Patel is the global vice president of Entrust","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.29.2","shortVersion":"4.29.2","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2474713852"}