TLDR; * Security should be mandated from top down and it should be implemented in partnership with individual contributors or the doors, right? Who own the implementation. * From a security standpoint, start small with frameworks like Nest, CIS, sock one and understand your risk tolerance. Do the gap analysis during the
September 30, 2022
TLDR; * To implement Zero Trust as part of the security program, understand the current Architecture first and then introduce Zero Trust in each layer one by one. Follow the NIST 800-207 guidelines closely. * Security debt is nothing but Tech Debt for Security. Have clear communication with Leadership team to find
September 23, 2022
TLDR; * For Zero Trust CIS 1 & 2 Benchmarks are the most important. To start, Draw & Understand the Inventory architecture. * Identity is one of the core components of Zero Trust and it feeds into Zero Trust. Define the Policies and enforce the policies to incorporate zero trust through out
September 15, 2022