Writing
Tagged “zero trust”
3 articles
-
Deep Dive into Zero Trust Security Model
The practical companion to my zero trust primer. The architecture as NIST defines it, what a single request looks like when it's verified end to end, how devices and services prove who they are, and a realistic order to…
-
Understanding Zero Trust: What It Is and Why It Matters
Zero trust isn't a product, whatever the booth at the conference says. It's the idea that being on the network shouldn't get you anything. Where it came from, why this year's string of VPN breaches makes the case, and…
-
Least Privilege Principle
Every big breach this year turned on an account that could do more than it needed to. The least privilege principle is fifty years old and still the cheapest security control there is. What it means in practice on…