Cyber Minds by Shira Rubinoff

Author:Shira Rubinoff
Language: eng
Format: epub
Tags: COM000000 - COMPUTERS / General, COM053000 - COMPUTERS / Security / General, COM079000 - COMPUTERS / Social Aspects / General
Publisher: Packt
Published: 2020-01-07T08:08:38+00:00

Implementing Zero Trust across organizations to limit access to sensitive data

Finally, restricting access by using a Zero Trust model cannot be overlooked, along with establishing trusted communication channels and protocols agreed upon by both upper management and the people who need access to sensitive data. You want an organization-wide standard, as both of my interviewees mentioned; implementing Zero Trust across the organization to limit access to sensitive data, unless access is granted per step, is a prudent and realistic measure.

We live in the age of Zero Trust, and there's no reason why your systems shouldn't reflect that reality.

In a Zero Trust system, access to data is only granted to the individuals who need access to that data. Each time a user requests information, that user must properly identify themselves to gain access to that information. By applying this every time, with no exceptions, this curtails a neglectful or malicious user's ability to move through an organization and "bucket-dump" information for current and later use. Heavy monitoring needs to be used on every step a user takes to access data, giving an organization better insight into its data and who accesses it.

This throws the need to delete data into sharp relief; data is the most sought-after asset a company has. It's what everyone is after. When companies store data that they don't need, they subject themselves to situations in which data can be lifted that should have never been stored in the first place. Even if we institute a Zero Trust model, people still have access to far more data than is appropriate, increasing risk for an asset that is extraneous and unnecessary.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.