Skip to main content
UploadLanguage (EN)Support
BusinessMobileSocial MediaMarketingTechnologyArt & PhotosCareerDesignEducationPresentations & Public SpeakingGovernment & NonprofitHealthcareInternetLawLeadership & ManagementAutomotiveEngineeringSoftwareRecruiting & HRRetailSalesServicesScienceSmall Business & EntrepreneurshipFoodEnvironmentEconomy & FinanceData & AnalyticsInvestor RelationsSportsSpiritualNews & PoliticsTravelSelf ImprovementReal EstateEntertainment & HumorHealth & MedicineDevices & HardwareLifestyle
Uploaded byOkta-Inc
PPTX, PDF2,904 views

What is Zero Trust

Zero Trust is a security model that requires verification of every individual accessing resources, treating all users and devices as untrusted until verified. As traditional network perimeters dissolve due to mobile and cloud technologies, organizations must implement access controls based on contextual need, ensuring all access is authenticated, authorized, and encrypted. The approach focuses on identity-driven security, emphasizing centralized identity management and continuous risk assessment.

Softwareā—¦
Downloaded 191 times
What is Zero Trust?
In the past, organizations protected themselves by putting a perimeter around their network.
Ā© Okta and/or its affiliates. All rights reserved. Okta Confidential 3 Network Perimeter Enforced by Firewalls TRUSTED UNTRUSTED Everyone inside the network was trusted. Everyone outside the network was not.
That was problematic, because if a hacker breached the network, they had access to everything inside of the company: including its most highly sensitive data.
Mobile + cloud have dissolved the perimeter Result: We can no longer assume people in the network should be trusted PEOPLE Employees Contractors Partners Suppliers Customers DATA Infrastructure Applications Platforms APIs
PEOPLE Employees Contractors Partners Suppliers Customers DATA Infrastructure Applications Platforms APIs Today, we need a perimeter around every person who accesses data in an organization. Contextual Access Result: Organizations should require access controls based on individual need and context
ā€œNever trust, always verifyā€ In a Zero Trust World
Secure access All resources are accessed in a secure manner, regardless of your location. Control access Each person is granted access on a need-to-know basis Inspect + log traffic Security + IT teams inspect + log all traffic to verify users are doing the right thing at the right time The Key Concepts of Zero Trust: #1 #2 #3
Zero Trust has evolved over time 2009 2011 2013 2015 2017 2019 2009: Forrester Zero Trust is born 2018: Releases ZTX Framework 2014: Google BeyondCorp research published 2017: Gartner CARTA published ā€¢ Connecting from a particular network must not determine which services you can access ā€¢ Access to services is granted based on understanding of you and your device ā€¢ All access to services must be authenticated, authorized and encrypted Continuous Adaptive Risk and Trust Assessment
Workloads Data Networks People Devices Data People Networks WorkloadsDevices When people are the perimeter, identity becomes the platform for Zero Trust Forresterā€™s Zero Trust Extended Ecosystem (ZTX)
Ā© Okta and/or its affiliates. All rights reserved. Okta Confidential Identity-driven security 1 Centralize identity and access control via single sign-on 1 Ensure strong authentication across all services, everywhere 2 Reduce your attack surface through automated provisioning and deprovisioning 3 Enable visibility, assurance and control over API resources 4 Integrate across the Zero Trust ecosystem
Learn more about the role of identity in Zero Trust at Okta.com/ZeroTrust