Established in 2012, Delhi School of Business, (Vivekananda Institute of Professional Studies-Technical Campus) is a private business school located in a 5-acres campus in the heart of Delhi. A member of AACSB, this institute offers 2 two-year PGDM...
For years, businesses have used traditional and weak methods to access their data and applications. This method suggests that everyone inside the organization is trusted blindly. The employee/worker can gain access to the company's data just because he/she works at the said firm. Anyone outside the organization's network is a suspect but the one inside benefits from the doubt. This traditional method has led to numerous security breaches and the inside circle gaining implicit trust. It allows outsiders only to cross the perimeter and gain access to the organization's workings.
Enter Zero Trust!
Zero Trust security is a model that sees every individual with an eye of suspicion, whether it is an outsider or insider. It is a layered security system that grants access to the users based on their identity and role. Whether the individual is at the office or working remotely, the zero trust model removes the binary of the insider employee gaining the benefit of the doubt. This model continuously asks for authorization and authentication at various places in the network rather than just at the perimeter.
The Zero Trust model acknowledges the fact that you cannot separate the "good guys" from the "bad guys". Establishing a strong perimeter is no longer enough as cloud service and hybrid workplaces have increased, making it difficult to secure. The model believes in the "never trust, always verify" approach, and scrutinizes every user at various points with identity proof and authentication. As the name suggests, it does not believe in trusting any individual and ensures that every data is given access only if the individual is verified. This phrase "Zero Trust" was coined by John Kindervag in 2010, who identified the absurdity of a perimeter-based approach towards security.
Oops! This image does not follow our content guidelines. To continue publishing, please remove it or upload a different image.
Five principles of Zero Trust Security:
Strong, adaptive authentication: Adding an adaptive type of multi-factor authentication (MFA) coupled with intelligent risk-based access enhances password security and offers valuable insights into user behavior. Continuous approval and authorization: It is possible to help guarantee that the correct user has access to the relevant resources by reauthenticating and revalidating user identities, for instance, following high-risk web browser sessions or extended periods of inactivity. Secure, least privileged access: The best strategies allow for dynamic provisioning; for example, reducing standing privileged access hazards by offering just-in-time (JIT) privileged access on a per-session basis. Continuously monitor and attest: The best approach to comprehend what is occurring and verify that it should be occurring, as well as to identify anomalies as they appear and preserve ideal system security, is to monitor continuously. Credential and authentication protection: Strong endpoint protection is built on endpoint privilege management, which is essential for identifying and thwarting attempts at credential theft (through memory scraping or software abuse), consistently enforcing least privilege (including removing local admin rights), and implementing flexible application control (like allow-listing for trusted sources) to fend off .
