Phased Approach to Zero Trust Architecture
- August 31, 2023
- Posted by: admin
- Category: Blog
The traditional model of network-perimeter centered security is outdated and can leave your organization open to potential attackers. Picture today’s workforce where employees are on the go using multiple devices from various locations, all while needing instant access to the cloud. The modern working environment has created a new perimeter based on people, and when people are your perimeter, identity becomes the single point of control. The Zero Trust Security Model recognizes this by focusing on the security of identities.
Combining usability and access for employees, as well as consumers, without compromising on security is a difficult task. However, using the Zero Trust principles encompassed by the phrase “Never Trust. Always Verify.” and the stages outlined below will make the transition from network to identity perimeter security more digestible. The Zero Trust security model means trusting no one and verifying everyone, so that the right people have the right access to the right resources at the right time all while maintaining security with as little friction as possible.
The following is a 3 Stage Process that can help identify your organization’s current security posture and explain how to progress towards a more mature, Zero Trust driven, security infrastructure.
Stage 0 – Fragmented Identity: Systems, services, applications, directories, and/or databases are disparate, with users having multiple, fragmented sets of potentially compromised credentials.
Stage 0 → Stage 1 Steps: Consolidate all identity data under one Identity & Access Management (IAM) system.
Stage 1 – Unified IAM: Single Sign-On (SSO) implemented for all user types (e.g. employees, contractors, customers, affiliates and partners), modern Multi-Factor Authentication (MFA) implemented to minimize credential targeted attacks, and centralized policies implemented across applications and servers.
Stage 1 → Stage 2 Steps: Implement contextual access based on rich user data, apply access policies that increase or decrease friction according to these signals, and implement automatic provisioning to and from applications for joiners, movers, and leavers.
Stage 1 – Contextual Access: User’s roles per application, device locations and network contexts are gathered and used to determine risk for applying access entitlements. Permissions are adjusted or removed when a user changes roles or leaves the organization.
Stage 2 → Stage 3 Steps: Implement an intelligent risk-based engine, with a risk tolerance based on gathered context and adaptive authentication, that is continuously updated and monitored.
Stage 3 – Adaptive Workforce: Continuous authentication throughout the user experience, not just at the front gates, via adaptive risk-based assessment. Users are re-prompted based on context changes that increase security, reducing friction for end users, producing high confidence in user identity results.
Many organizations may be in the early stages on the road to a mature Zero Trust Architecture (ZTA). Identity And Access Solutions can help at any step in the journey to implement, manage, and/or adjust your security posture.
If you want to learn more about how we can help, read about our Enterprise IAM and Customer IAM (CIAM) Actionable Advisory Assessments.
Have question or comment? Feel free to post below or send to info@identityandaccesssolutions.com.
Mak is a Cyber Security Executive with over 20 years of experience in Security Controls Design, Implementation and Sustainment with proven management, analytical, technological and strategic skills. He is a globally experienced, process driven and result oriented leader with a proven track record of successfully leading high-performing technical and non-technical teams and delivering industry leading IT Security Capabilities. He has led large scale Cyber Strategy and Implementation projects for Fortune 500 organizations from Finance, Insurance, Banking, Healthcare, Media and Communications domains. He has successfully managed and coordinated global teams to deliver complex project in Identity and Access Management(IAM), Privileged Access, Data Analytics, Risk Management, Governance and Compliance.
Todd is a recognized IAM and Cloud industry expert who brings over 20 years of experience in managing, advising, architecting, and deploying IGA, Authentication and Authorization, and Cloud solutions and services across IDaaS, SaaS, IaaS, and PaaS. Todd is a frequent speaker on effective risk and security practices at leading industry events. He is responsible for the oversight of CyberSolve’s business segments and for the development of strategic plans to sustain the company’s rapid growth while providing trusted advice to clients across the security and risk spectrum.
Atul has over 20 years of experience in managing, designing and implementing Customer Relationship Management (CRM) and Salesforce integrations. He has acted as a cloud-focused solutions expert in both domestic and international markets. Prior to founding CyberSolve, Atul was a Technical Consulting Director at Salesforce where he demonstrated his strong experience architecting financial services industry solutions. Atul holds a Bachelor of Engineering from Madan Mohan Malaviya University of Technology.
Shub possesses over 15 years of experience in the Identity and Access Management (IAM) industry in pre-Sales and technology architecture roles. Shubham has held various positions with SailPoint, RSA, Saviynt, and Okta. He has extensive Identity and Access Management industry technology and sales experience in both domestic and international markets as well strong knowledge of how Identity and Access Management satisfies Audit and IT compliance issues. Shub holds a 
Rajesh has served Multi-National Corporations and large organizations as a full time Vice President of Finance, Chief Financial Officer and in equivalent roles. In order to fulfill his duties as a CFO he is a Chartered Accountant, holds a Diploma in Information System Audit (DISA certified by the Institute of Chartered Accountants of India), is a Certified SAP Consultant, Certified QuickBooks Professional Advisor, and Zoho Partner with 30+ years of experience in managing Finance, Accounting and ERP Systems for Medium to Large organizations in diverse sectors.
John is an experienced IT executive with extensive business leadership, operations management, project management, technology delivery and consulting skills who spent over two decades with General Electric where he was responsible for all aspects of their Global PIM program, he was also a key member of the security assurance team for the organizations Capital business. John leads the delivery of client services across the business landscape, to include Privileged Access Management, Managed Services, Identity Governance & Administration, Cybersecurity and Cloud Services.
Luis has been facilitating IAM programs for 20+ years. He was the CRO at Clear Skye, which builds identity governance capabilities on the ServiceNow Platform. His prior experience with services companies that deliver real world identity solutions has made him a trusted resource for information security executives that he has the privilege of advising. Luis assists in the management of our global sales organization, driving revenue growth via direct sales, ensuring our customers have the best plan and solution to ensure their IAM investment achieves the lowest TCO while providing the highest ROI.
Amit brings over 15 years of Identity and Access Management (IAM) experience to the organization. He has a proven track record in providing customers with the best of breed Identity and Access Management solutions. He ensures success within all engagements by staying integrated with the customer throughout the engagement whether it is a program, project or managed services and support. Amit acts as a customer champion at all times to ensure the right solution and resources are in place to achieve the right requirements.
James leads the delivery of client services across the Identity, Access, and Authorization landscape. He has delivered projects across a wide range of products including Okta, Ping, ForgeRock, Oracle, Microsoft, Citrix, Imprivata, Radiant Logic, Axiomatics and many others. With the advent of modern cloud services, James has served as the internal cloud architect and administrator for almost 10 years and uses that experience to help users make the best use of it.
Clark is a Channels, Sales and Marketing executive with 40+ years of experience as a direct seller, Executive and Founder. His experience includes services, software and hardware sales to Commercial, Federal, and State/Local/Education entities across US Domestic and International markets. Within the IAM spectrum, Clark spent over 5 years as SailPoint’s Channel Manager, Federal & Healthcare markets. He has developed and managed Partner relationships and strategies globally, and is known for significantly growing the revenue of his partners by building trusted, profitable relationships and business strategies.