{"id":3398,"date":"2022-04-06T14:11:53","date_gmt":"2022-04-06T14:11:53","guid":{"rendered":"https:\/\/kuma.pro\/?p=3398"},"modified":"2023-09-21T16:33:29","modified_gmt":"2023-09-21T16:33:29","slug":"beyond-the-buzzword-what-is-the-zero-trust-model-and-why-is-it-essential","status":"publish","type":"post","link":"https:\/\/kuma.pro\/beyond-the-buzzword-what-is-the-zero-trust-model-and-why-is-it-essential\/","title":{"rendered":"Beyond the Buzzword: What is the \u2018Zero Trust Model\u2019 and Why is it Essential?"},"content":{"rendered":"

To help understand the concept of the Zero Trust Model when it comes to data privacy and security, think of something very old: a castle from the Middle Ages. The traditional approach to security called for high walls, a moat, and a drawbridge all meant to fend off an outside attack. Those allowed inside the castle walls were considered trusted and had unchecked access. Applying the Zero Trust Model, the exterior barriers would remain, but additional interior measures would track everyone\u2019s movements throughout the castle and reconfirm authorization prior to accessing any room.\u00a0<\/span><\/p>\n

That\u2019s one way that <\/span>Catalino \u201cCat\u201d Vega<\/span><\/a>, a Senior Security Analyst at Kuma, explains the Zero Trust Model to those outside the field. Another way: \u201cImagine you\u2019re at a 21-and-older club, but the bartender still checks your ID when you order an alcoholic drink,\u201d he says. \u201cZero Trust.\u201d<\/span><\/p>\n

At Kuma, where he joined the team in 2021, Cat helps organizations of all sizes mature their application security programs at a technical level and runs specific client engagements in a Chief Information Security Officer (CISO) capacity. For the latter responsibility, Cat says he is laser-focused on creating a bridge between a company\u2019s technology staff and business teams.<\/span><\/p>\n

\u201cThe next generation of CISO is already here, and they are more business-minded than ever before,\u201d he explains. \u201cA key differentiator when rolling out a new data privacy and security program lies in Kuma\u2019s ability to work cross-functionally with teams and tie our successes to the business.\u201d\u00a0<\/span><\/p>\n

Data Privacy and Security Experts Like Cat Make Kuma Stand Out<\/span><\/h5>\n

Cat came to Kuma with more than 15 years of experience in information security. He is a Certified Information Systems Security Professional and earned a degree in Management Information Systems and Computer Programming from Southwestern College. Cat is a proud veteran of the U.S. Air Force, where he worked his way up from helpdesk technician to senior security engineer to Director of Information Technology at Shaw AFB in South Carolina. After leaving the service, Cat led IT infrastructure and compliance for a healthcare firm, then joined a consultancy where he served as CISO for a diverse set of over 20 healthcare organizations. As a regional leader at PwC for six years, Cat was responsible for security testing and compliance of over 5,000 applications across the Western Hemisphere that generated nearly $50 billion a year for the firm.\u00a0<\/span><\/p>\n

\u00a0<\/span>His military experience helped Cat develop an appreciation for the non-negotiable nature of the Zero Trust Model. At Kuma, he combines that mindset with an eye toward keeping businesses running smoothly. \u201cWhen I was in the Air Force, I may have shut down an entire system because it was not patched,\u201d Cat said. \u201cToday, the goal is to enable businesses to do their work securely. So the approach I take now is, \u2018How can I secure this with the least amount of business disruption?\u2019\u201d<\/span><\/p>\n

While the military may long have taken a zero-trust approach to data privacy and security, the concept is now spreading throughout the federal government. In January, U.S. <\/span>officials announced<\/span><\/a> that the Zero Trust Model would be the government\u2019s new cybersecurity standard. Cat says he welcomes that move, particularly as both government and private entities move to a more decentralized approach to work, increasing the importance of identity confirmation.<\/span><\/p>\n

\u201cI\u2019ve definitely seen greater interest in Zero Trust, and it\u2019s important that we educate people about what that really means so it doesn\u2019t just become a superficial buzzword,\u201d he says. \u201cAn organization reached out recently to ask us to help them move toward Zero Trust. We performed an in-depth assessment of their needs and were able to present them with multiple options to get them to Zero Trust maturity levels. They were happy with the transparency and grateful that we provided them with actual insight and not just an implementation plan.\u201d<\/span><\/p>\n

3 Things Business Leaders and Staff Need to Know About the Zero Trust Model<\/span><\/h5>\n

One of Cat\u2019s specialties is being able to communicate passionately and confidently about data privacy and security to all levels of an organization\u2019s hierarchy. Here are his top three lessons for executives and his top three lessons for technical staff when it comes to the Zero Trust Model:\u00a0\u00a0<\/span><\/p>\n

For Business Leaders:\u00a0<\/b><\/h6>\n
    \n
  1. Build and Maintain Cross-Functional Relationships. <\/b>It\u2019s essential to secure buy-in across leadership when rolling out a new solution like the Zero Trust Model. Just as Cat mentioned next-generation CISOs who are more business-minded than ever, all leaders must be willing and able to work cross-functionally with teams throughout the organization. \u201cRelationships are key,\u201d Cat says.\u00a0\u00a0<\/span><\/li>\n
  2. Clearly Identify the Zero Trust Value-Add. <\/b>Align delivery of this program to meet business needs. \u201cAt Kuma, we start by providing a crucial overview of an organization\u2019s security weaknesses and vulnerabilities, which helps to illustrate where Zero Trust would benefit and where not having it could cause potential harm,\u201d Cat explains.\u00a0<\/span><\/li>\n
  3. Establish a Culture of True Least Privilege. <\/b>Zero Trust applies to all levels of an organization\u2019s hierarchy, which means executives need to learn to be OK going through the same verification and authorization processes as employees. \u201cSecurity checks shouldn\u2019t be an annoyance,\u201d Cat notes. \u201cThey should be par for the course.\u201d<\/span><\/li>\n<\/ol>\n
    For Technical Staff:<\/b><\/h6>\n
      \n
    1. Prepare Integrations. <\/b>Be ready to enable Zero Trust initiatives. This means setting the groundwork through education and training for technical staff in advance of a Zero Trust Model rollout.\u00a0\u00a0\u00a0\u00a0<\/span><\/li>\n
    2. Embrace Change. <\/b>Cat suggests tapping a Zero Model Trust champion in the organization who can assist other employees during the critical implementation phase. \u201cFinding someone who can keep everyone on the same page can save considerable time and money as we get closer toward Zero Trust,\u201d he says.\u00a0\u00a0<\/span><\/li>\n
    3. Build and Maintain Cross-Functional Relationships. <\/b>The same advice for bosses holds true for all staff. When technical staff are aware of and understand the business needs behind adopting a Zero Trust Model, they are more likely to embrace the effort. Often, this knowledge is achieved through cross-functional relationships throughout the organization, Cat says. \u201cWe need buy-in from every team within the enterprise,\u201d he adds. \u201cAll hands on deck!\u201d\u00a0<\/span><\/li>\n<\/ol>\n

      Remember the castle analogy? Imagine that castle is your company\u2019s network infrastructure. Would you still feel comfortable letting visitors run around without authorization checks? Cat guesses the answer is no, and he and his team at Kuma are here to help your business address its data privacy and security shortfalls \u2014 all the way to Zero Trust.\u00a0<\/span><\/p>\n

      \u201cI genuinely believe that there is no reason to blindly trust the activities inside your network,\u201d Cat says. \u201cThe Zero Trust Model is a shift from the way things may have been done in the past, but it\u2019s absolutely necessary to calibrate your security program against the current threat landscape. As we constantly update our programs, there is always a way to fold in those Zero Trust principles where they make the most sense.\u201d\u00a0<\/span><\/p>\n

      Visit <\/span>Kuma\u2019s website<\/span><\/a> for in-depth information about privacy and security, digital identity, vulnerability and threat intelligence, fraud verification, and other resources. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

      To help understand the concept of the Zero Trust Model when it comes to data privacy and security, think of something very old: a castle from the Middle Ages. The traditional approach to security called for high walls, a moat, and a drawbridge all meant to fend off an outside attack. Those allowed inside the […]<\/p>\n","protected":false},"author":6,"featured_media":3399,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[89,31],"tags":[25,114],"_links":{"self":[{"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/posts\/3398"}],"collection":[{"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/comments?post=3398"}],"version-history":[{"count":3,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/posts\/3398\/revisions"}],"predecessor-version":[{"id":6661,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/posts\/3398\/revisions\/6661"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/media\/3399"}],"wp:attachment":[{"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/media?parent=3398"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/categories?post=3398"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kuma.pro\/wp-json\/wp\/v2\/tags?post=3398"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}