Index 04 / Talks

January 2023 · Analyst Insights

Analyst Insights: Advancing Zero Trust Priorities

Runtime
50:05
Series
Analyst Insights
Recorded
January 2023

Zero trust as a discipline rather than a product: why it is a philosophy and not something bought out of the box, why most organizations are further along than they think, and the difference between checkbox compliance and audit-ready.

21 chapters
  1. 00:00:01Introduction: a different format, a conversation
  2. 00:01:10Chris's zero trust research and the EMA surveys
  3. 00:03:19Zero trust is a philosophy, not a product
  4. 00:06:24A working definition: trust no one and verify everything
  5. 00:07:35Organic authentication: identity, device, location, metadata
  6. 00:09:42Pandemic, location, and why access has to change
  7. 00:11:50Compliance as the driver: roughly 20% cite audit
  8. 00:13:47You are already at step 11
  9. 00:14:54Passed-down compliance and vendor due diligence
  10. 00:16:48Henry's House of Paper Clips
  11. 00:18:45Where a one-person IT shop starts
  12. 00:22:59Data survey, risk evaluation, next steps
  13. 00:24:48Security as a competitive differentiator
  14. 00:29:49Colonial Pipeline and the case for constant reevaluation
  15. 00:33:00Checkbox compliance versus audit-ready
  16. 00:37:19Why you should not show 100% compliance
  17. 00:38:30Presenting security KPIs to the C-suite
  18. 00:40:41Measuring what you improve
  19. 00:42:40The hardest part: evaluation and planning
  20. 00:45:41What does 'done' look like
  21. 00:48:44Close

Also on YouTube · zero trust, philosophy not product, trust no one verify everything, Cloud Security Alliance, John Kindervag

Next — Blogs