Zero Trust Security: Progress Report and One Identity Research Findings – MSSP Alert

by D. Howard Kass Dec 12, 2021

How important is implementing a Zero Trust security framework to organizations?Its important but not enough yet for most organizations to move forward with it, according to a newly released study.

Although three in four organizations consider Zero Trust critically or very important in their security armada, only one in seven have fully implemented the architecture, according to research results issued by One Identity, an Aliso Viejo, California-based unified identity security solution provider. Of the 1,000 survey professionals surveyed, 99 percent pegged Zero Trust overall as important. Still, about one in three organizations dont understand how they can implement Zero Trust within their environments and only 20 percent of stakeholders believe that their organizations fully comprehend Zero Trust.

Despite the hesitation surrounding Zero Trust, there is much wind at its back generated by the federal government. On the heels of President Bidens executive order in May 2021 covering the nations cybersecurity profile, the Office of Management and Budget (OMB) in September released a draft strategy to move the government towards a Zero Trust architecture. The Cybersecurity and Infrastructure Security Agency (CISA) simultaneously released its Cloud Security Technical Reference Architecture and Zero Trust Maturity Model to guide and assist agencies in their implementation planning.

Neither of these steps are incidental to Zero Trusts expansion across the enterprise. Heres reason for the optimism:

What factors are holding organizations back from implementing Zero Trust?

How is Zero Trust progressing in the enterprise?

Organizations recognize that the traditional perimeter is no longer enough and that they will be best served by prioritizing identity security and taking steps to ensure bad actors are limited once they gain access, said Bhagwat Swaroop, One Identity president and general manager. Zero Trust is fast becoming an enterprise imperative because it eliminates vulnerable permissions and excessive access by delivering a continuum of different rights across the organization to ultimately limit attack surfaces if they are breached.

Link:

Zero Trust Security: Progress Report and One Identity Research Findings - MSSP Alert