Building Zero Trust on a Sound Foundation

Executive Order 14028 mandates agencies implement zero trust (ZT) architectures for all cyber networks. Zero trust relies on a full understanding of the cyber attack surface in order to move the boundary closer to the user and secure each component. After all, you can’t secure what you don’t know you have.

Many agencies are still struggling to answer simple questions:

• What devices have access to our environments?
• Is the core software up to date?
• Are unapproved applications in use? What is their network access? and
• Is the device managed by an endpoint protection solution?

These questions need definitive answers and organizations need defined processes in order to build the foundation for a zero trust architecture. Manual mapping and monitoring of the cyber-attack surface leaves organizations scrambling to keep up, their people mired in manual deduplication and correlation.

Learning Objectives:

• Understand the importance of full attack surface observability before implementing a ZTA
• Identify existing cyber solutions and how to build interoperability that spans tech siloes
• Delineate ways to optimize existing resources and build in needed additional resources
• Learn how to assess the functional readiness of existing systems to work within a ZT architecture