Posted in Business, Methodology on Nov 19th, 2019
One of the most common misunderstandings I meet in board rooms is that moving to the cloud means moving the security responsibility as well. ‘Microsoft takes care of that now.’ Well, partly. The cloud provider takes care of the physical datacenter, the hardware and, depending on the service, a good part of the platform. That […]
Read Full Post »
Posted in Security Architecture on Nov 19th, 2019
After my posts about Zero Trust I have got a few questions from managers along the lines of: ‘Sounds great, what does it cost?’ Fair question. The answer is that it depends on where you start, but probably less than you think. Zero Trust is not a product you buy. It is a way of […]
Read Full Post »
In my Zero Trust posts earlier this year I wrote about verifying everything. One thing I didn´t go into is the device. A username and a password tell you who claims to logon. The device tells you a lot about whether you should believe it. Think about it. A correct password from a managed, patched […]
Read Full Post »