After my posts about Zero Trust I have got a few questions from managers along the lines of: \u2018Sounds great, what does it cost?\u2019 Fair question. The answer is that it depends on where you start, but probably less than you think.<\/p>\n
Zero Trust is not a product you buy. It is a way of building, and most companies already own a good part of the pieces. Identity platform, device management, logging. The problem is seldom the licenses, it is that the functions are not used.<\/p>\n
So how should management approach it? Don\u00b4t start a big bang project with a three year plan and a hundred page report. Start where the risk is the highest: your admin accounts and your most sensitive data. Protect those first, measure the effect and move on. Every step should reduce a known risk, and if it doesn\u00b4t, skip it.<\/p>\n
Make it a program, not a project. Give it a sponsor in management, a small yearly budget and a follow-up twice a year. Ask for simple metrics: How many admin accounts do we have? How many devices are managed? How much of our sensitive data is protected?<\/p>\n
And please, don\u00b4t let the vendors sell you Zero Trust in a box. There is no such thing.<\/p>\n
Do the right things first. The rest will follow.<\/p>\n","protected":false},"excerpt":{"rendered":"
After my posts about Zero Trust I have got a few questions from managers along the lines of: \u2018Sounds great, what does it cost?\u2019 Fair question. The answer is that it depends on where you start, but probably less than you think. Zero Trust is not a product you buy. It is a way of […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[38,51,23],"class_list":["post-1050","post","type-post","status-publish","format-standard","hentry","category-security-architecture","tag-business","tag-security-strategy","tag-zero-trust"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1050"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1050\/revisions"}],"predecessor-version":[{"id":1062,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1050\/revisions\/1062"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1050"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1050"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}