{"id":5874,"date":"2022-03-23T12:16:44","date_gmt":"2022-03-23T16:16:44","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5874"},"modified":"2022-06-13T13:48:18","modified_gmt":"2022-06-13T17:48:18","slug":"adapting-zero-trust-amid-the-great-reshuffle","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/adapting-zero-trust-amid-the-great-reshuffle\/","title":{"rendered":"Adapting Zero Trust Amid the \u201cGreat Reshuffle\u201d"},"content":{"rendered":"

\"Adapting<\/p>\n

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014Larry Chinski, the VP of Global IAM Strategy at One Identity<\/a>, shares some insights on the value of implementing a Zero Trust methodology into your company amidst the current “Great Reshuffle” in the workplace.<\/span><\/span><\/em><\/strong><\/p>\n

The last two years have been challenging for the workplace and workforce alike. As we transition from the “Great Resignation” and enter what is dubbed by some as the “Great Reshuffle,” millions of workers are leaving their jobs for roles with a better work-life balance, remote possibilities, and a workplace more aligned to their values. <\/span><\/p>\n

While this can be a win-win situation for all parties involved, increased turnover rates and new hires can lead to further vulnerabilities within an organization. And, with SolarWinds, the Colonial Pipeline incident, and Log4j still fresh in our minds, organizational cybersecurity, data protection, and protecting user identities<\/a> is now more critical than ever. <\/span><\/p>\n

Zero Trust: Never Trust, Verify Everything<\/span><\/b><\/h3>\n

The old network perimeter-centric view of cybersecurity is almost nonexistent. Modern enterprise infrastructures are distributed across multiple physical sites, virtual machines, public and private cloud systems, and many platforms, environments, and operating systems. However, your customer’s expectations likely haven’t changed, and they might hold your organization to higher standards because of the change in circumstances. <\/span>\u00a0<\/span><\/p>\n

Today’s borderless perimeter requires secure access for users regardless of location, device, or network. Customers, stakeholders, and employees are still counting on organizations to secure their data and protect their identities. As a result, many organizations have implemented a Zero Trust model into their IT security programs. Zero Trust<\/a> is a proven model for implementing robust and selective security by eliminating implicit trust and validating every stage of digital interaction. <\/span>\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

With the mantra “Never Trust, Verify Everything,” Zero Trust continuously verifies user-access permissions (human and machine) to all requested resources (on-premises, cloud, and hybrid). It also monitors and compares user actions to baseline behavior analytics to check for anomalies that may require formal verification and\/or immediate action.<\/span>\u00a0<\/span><\/p>\n

A critical element of Zero Trust is securing identities, implementing processes to manage identities, and monitoring those identities. It involves removing vulnerable permissions, unnecessary access, and excessive access in favor of specific delegation and proper provisioning. In other words, Zero Trust ensures the right people in your organization have the right level of access to the right resources. <\/span>\u00a0<\/span><\/p>\n

In a recent <\/span>survey <\/span><\/a>of more than 1,000 IT security leaders from around the globe, 75% agreed that “Zero Trust is of great importance to their overall security posture.” However, in that same survey, despite rising awareness, only 14% of organizations reported having already implemented a Zero Trust Model, citing a “lack of clarity” around how Zero Trust should be implemented as the most significant barrier to success.<\/span>\u00a0<\/span><\/p>\n

As evidenced by the survey results, implementation is a work in progress and is an ongoing, continuous IT security project. Today’s virtual workplace and high turnover rates seen with the “Great Resignation” and “Great Reshuffling” are partly to blame.<\/span>\u00a0<\/span><\/p>\n

Adaptive Zero Trust: The Game Changer<\/span><\/b><\/h3>\n

The evolving threat landscape has allowed many organizations to step up their security game through an adaptive Zero Trust approach. Specifically, this means using a method that recognizes an organization’s need to evolve alongside internal and external factors yet still operates by the following Zero Trust key principles based on <\/span>NIST 800-207<\/span><\/a> guidelines:\u00a0<\/span>\u00a0<\/span><\/p>\n