Security News > 2021 > October > Four key tenets of zero trust security

Zero trust is a security model that can be summed up as "Never trust, always verify." In other words, whether a connection to a system or data is attempted from inside or outside the organization's network, no access is granted without verification.

The first piece of physical security includes on-site monitoring of the data center, such as 24/7 cameras, professional security teams patrolling the site, and locks on cages to prevent unauthorized access to the hardware within the racks.

To operate with a zero trust model, enforcing "Access denied" unless proven otherwise is a key step.

Access is granted through a role-based access control model, providing specific individuals access based on their function.

In addition to current authorization, all employees are subject to regular access reviews to determine and ensure they still need access after changing roles, teams, or departments.

More general process oriented security activities include annual penetration testing and regular patching schedules for all systems.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/tsMRZ6PnuoM/