by Jesper Kråkhede, Sweden
Posted in Security Architecture, Security metrics, Technology on Aug 23rd, 2020
Most of us are still working from home, at least here in Sweden where the recommendation still stands, and in many countries the numbers are starting to go up again. It means our information is spread out more than ever, on laptops, home printers and in a dozen cloud services. Which brings me to information […]
Posted in Security Architecture, Technology on Jun 19th, 2020
It looks like many of us will split our time between home and office for quite a while. Some days in the office, most days at home. That creates a few technical challenges that I see over and over again. The first is the device. A laptop that spends weeks outside the office doesn´t get […]
Posted in Security Architecture, Technology on Feb 2nd, 2020
In my first Zero Trust posts last year I wrote that you can never trust any data and that all principles of the Secure Development Lifecycle must be followed. Let me go a bit deeper on that. The classic SDL is about building software without vulnerabilities: training, threat modelling, code review, static analysis, testing and […]
Posted in Security Architecture on Nov 19th, 2019
After my posts about Zero Trust I have got a few questions from managers along the lines of: ‘Sounds great, what does it cost?’ Fair question. The answer is that it depends on where you start, but probably less than you think. Zero Trust is not a product you buy. It is a way of […]
Posted in Security Architecture, Technology on Nov 19th, 2019
In my Zero Trust posts earlier this year I wrote about verifying everything. One thing I didn´t go into is the device. A username and a password tell you who claims to logon. The device tells you a lot about whether you should believe it. Think about it. A correct password from a managed, patched […]
Posted in Business, Security Architecture on Jul 28th, 2019
Here is a little exercise for you. Imagine that tomorrow morning nobody can come into the office. Not for a day, but for weeks. It doesn´t really matter why. A fire, a flooded basement, a strike in the public transport or something else entirely. Everybody has to work from home. How does your security look […]
Posted in Security Architecture, Technology on Jul 19th, 2019
When I ask customers what they log the answer is usually something with the firewall. Gigabytes per day of network flows that cost a fortune to store and that nobody reads. In a Zero Trust world the interesting stuff happens elsewhere. Start with the identity logs: sign-ins, failed sign-ins, MFA changes, risky sign-ins, changes to […]
Posted in Computer Forensics on Jul 2nd, 2019
Computer forensics used to be quite straight forward. Find the computer, take an image of the disk, follow the traces and figure out what the person did. With Zero Trust the computer is no longer the centre of the investigation. The identity is. Every access is verified and logged, so we have a lot more […]
Posted in Security Architecture on Jun 17th, 2019
I get the question surprisingly often: ‘If we go for Zero Trust, can we get rid of the firewalls?’ Short answer: No. Zero Trust is not a new religion that makes everything before it obsolete. It is an extension of the security we have always done. Defense in depth, least privilege, separation of duties, logging. […]
Posted in Security Architecture on Jun 5th, 2019
Every so often I sit in a workshop where someone proudly tells me that they are well on their way with Zero Trust. Then they show me the network diagram. Microsegmentation, new firewalls, a few more VLANs. All good stuff, I´m not saying it isn´t. But if that is all you do you have just […]