Cyber Defense eMagazine July Edition for 2022

For the ultimate breakdown of Zero Trust best practices and implementation, download a free copy of
the first and only “Definitive Guide to Zero Trust Security.”
Best Practices for Zero Trust Implementation:
With Zero Trust implementation being a new initiative, the chances are good that your organization will
experience some growing pains with Zero Trust architecture. This isn’t uncommon — nor should it serve
as an excuse to abandon the new measures. In our experience, these tactics can often be of benefit:
1. Go zone by zone.
“Boiling the ocean” is never a good idea with Zero Trust architecture. Instead, enforce policies trust zone
by trust zone. Perhaps start with your highest-value application and expand out from there.
2. Use orchestration for DevOps.
Integrating DevOps with cloud infrastructure tools can help protect data, applications, and workflows
within cloud platforms when moved to Zero Trust architecture.
3. Update policies.
Zero Trust security is a dynamic environment. IT teams should be monitoring both policy violations and
new connections that might require new policies. Update policies and enact new ones based on the
findings. Again, the right policy engine can streamline this.
4. Extend Zero Trust to endpoints.
The same principles should be applied to all endpoints within an organization, including servers, laptops,
PCs, and mobile devices. Traffic can help to identify where to direct IT attention. Only authorized
processes should run at these endpoints, thereby reducing the risk of cyberthreats.
Zero Trust architecture should do more than stitch together security protocols. It can help an organization
establish a set of rules and control to determine which entities can gain access to restricted locations and
critical information within a company.
Cyber Defense eMagazine – July 2022 Edition 226
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.