Posts with keyword: zero+trust

4 entries

Zero Trust, Least Privilege, and Just-in-Time Access

Wed Apr 2 13:39:00 2025

When dynamic access control with JIT access is thoughtfully implemented, you shift the burden of security from employees to systems that automate protection, making it proactive and intelligent.
Continue reading {Zero Trust, Least Privilege, and Just-in-Time Access}

Zero Trust with Zero Data

Wed Feb 14 08:18:00 2024

The physical world is full of zero trust examples, but they gather attributes for the access control decisions in a very different way than we're used to online.
Continue reading {Zero Trust with Zero Data}

Zero Data

Thu Oct 5 15:17:00 2023

Like Zero Trust, Zero Data represents a paradigm that organizations can embrace to enhance their overall security posture. But the benefits go far beyond better security.
Continue reading {Zero Data}

Zero Trust

Mon Aug 28 20:42:00 2023

My new book Learning Digital Identity from O'Reilly Media covers many of the topics in this post such as multi-factor authentication, authorization and access control, and identity policy development in depth. Zero Trust is a security framework that is better attuned to the modern era of sophisticated threats and interconnected systems. Past practices included techniques like virtual private networks (VPNs) that tried to emulate the idea of an intranet where trusted computers and people were protected from hackers by a firewall that "kept the bad stuff out." As more and more work has gone remote and personal devices like
Continue reading {Zero Trust}