News & Articles

Filter by Category:

Identity & Authentication: ZTA’s “Square-One”

April 26, 2022

What exactly does zero trust mean, and how do you get your organization there? For the uninitiated, “zero-trust” is not just a marketing buzzword or a meaningless veil constructed to cover a business’ empty and unfulfilled promises. “Zero-trust”, as a term, is a technical qualifier – meaning that the subject with which the adjective “zero-trust” adheres to the principles, guidelines, and functional specifications defined within the foundational NIST text designed to address what makes a network architecture a ZTA.

What is the Zero Trust Architecture?

March 31, 2022

The Zero-Trust Architecture (ZTA) is not in itself a specific technology. Instead, it is a cutting-edge operational philosophy that security architects utilize to preserve the networks of today. Zero-Trust is, in its essence, a “never trust, always verify, and assume breach” thought process for modern cybersecurity.

What is a cybersecurity expert?

What is a Cybersecurity Expert?

February 17, 2022

The term cybersecurity expert is overplayed. There is no official or legal definition, and between companies, the meaning of “cybersecurity expert” can vary greatly. When we talk about cyber, we need to understand our audience and trust the “experts” we rely on for information. As we talk to others, what attributes do we use to signal that we are cybersecurity experts? As we interview people for job openings, how do we qualify and differentiate between all of the candidates calling themselves “experts”?

The user and the device: the two most critical pillars of a Zero Trust Architecture

January 28, 2022

DISA’s 163-page document on the Zero Trust Reference Architecture presents seven pillars of a zero trust environment. These include the user, device, network, applications, data, visibility, and orchestration. Each of these pillars deserves a deep analysis, but in this short post we argue why the first two — user and device — are most critical.

Zero Knowledge vs Zero Trust

Zero Knowledge vs Zero Trust

December 7, 2021

Zero Knowledge and Zero Trust: they’re basically the same, right? Not quite. While these two terms might be similar in name, they are in fact two completely different ideas. Zero Knowledge can be used to help complete the notion of Zero Trust, but it cannot work in the opposite direction. Zero Knowledge is a mathematical distinction, whereas Zero Trust is a philosophical one.