Is Zero Trust Achievable?
Architecture & Governance Magazine, Monday, July 3,2023
The concept of Zero Trust is 'never trust, always verify' so that in a Zero Trust Architecture (ZTA) every access request is regarded as potentially hostile and so needs to be authenticated, authorised and continually validated.
It's become the technology to invest in, with a survey by the Cloud Security Alliance revealing that 94% of IT and security professionals are involved in implementing the strategy and 77% foresaw they would increase spend over the course of the next 12 months.
Zero Trust is not new, however, with the term first bandied around in 2010 when deperimeterisation of the network was the issue of the day. It's now come of age due to two factors. Firstly, the explosion in remote working which revealed the vulnerabilities associated with VPNs making it necessary to come up with a replacement in the form of Zero Trust Network Architecture (ZTNA). And secondly due to the maturation of identity authentication and authorisation solutions such as Identity Access Management (IAM), Privileged Access Management (PAM) and Cloud Infrastructure Entitlement Management (CIEM) etc.