Três conclusões da nova folha de informações de cibersegurança da NSA

The U.S. National Security Agency (NSA) has issued a new cybersecurity information sheet, Advancing Zero Trust Maturity Throughout the Network and Environment Pillar.  

I’m particularly excited about this document because it recognizes Zero Trust Segmentation (ZTS) as an essential component of Zero Trust, a stance I’ve taken since the beginning. In fact, in the second Zero Trust report ever written, Build Security into your Network’s DNA from November 2010, I wrote this: “…new ways of segmenting networks must be created because all future networks need to be segmented by default.”

With ransomware payments amounting to $1.1 billion in 2023, it’s essential that organizations build Zero Trust architectures with ZTS at their core. This is because ransomware attacks depend on flat networks for success. Flat networks are dangerous. You may pay the bills, but attackers own them.

Aqui estão minhas três principais conclusões da nova folha de informações.

1. ZTS: Uma tecnologia Zero Trust fundamental

I've long believed that segmentation is how we create Protect Surfaces, the fundamental concept of Zero Trust. However, over the past few years, there has been a pronounced emphasis on the Identity pillar of Zero Trust. Identity is important, but the singular focus on this pillar has led to very few organizations understanding the importance of network security controls in building Zero Trust environments, both on-premises and in the cloud.

This is why it’s so great to see the NSA’s new information sheet reaffirm the value of network security in building Zero Trust — ZTS is finally getting the attention it deserves. According to Gartner, “By 2026, 60% of enterprises working toward zero trust architecture will use more than one deployment form of microsegmentation, which is up from less than 5% in 2023.”

O ZTS só se tornará mais importante à medida que a superfície de ataque se expandir e as redes se tornarem cada vez mais complexas e interconectadas. É a melhor maneira de as organizações construírem resiliência e estabelecerem uma arquitetura Zero Trust verdadeira e duradoura.  

2. Você não pode criar Zero Trust sem mapeamento de fluxo de dados

I want to give kudos to the NSA for calling out the significance of data flow mapping in the information sheet. In the early days of Zero Trust, I learned that you must first understand how a system works together before you can successfully build out Zero Trust environments. I’ve been advocating for flow mapping ever since.

Back in 2022, I was honored to be appointed to serve on President Biden’s National Security Telecommunications Advisory Committee subcommittee, where I was a part of authoring and delivering a report on Zero Trust to the President. This report documents the 5-Step Model I have been promoting for several years, with Step 2 focused entirely on Transaction Flow Mapping.  

Learn more about how Illumio can help you get end-to-end visibility across your entire hybrid attack surface.

3. A segurança da rede é Zero Trust

Vejo muitas organizações começando com o pilar de identidade do Zero Trust e, infelizmente, raramente as vejo chegando ao pilar da rede. Essa não é a maneira correta de construir o Zero Trust. A segurança da rede é parte integrante do Zero Trust — proteger a rede é Zero Trust!

Acredito que a nova orientação da NSA ajudará muito as organizações a entender o valor do pilar de rede do Zero Trust e a buscar tecnologias de segurança de rede em sua jornada rumo a uma arquitetura Zero Trust.

ZTS is a foundational technology of Zero Trust’s Network pillar. ZTS contains the spread of breaches and ransomware across the hybrid attack surface. With the Illumio ZTS Platform, you can visualize how workloads and devices are communicating, create granular policies that only allow wanted and necessary communication, and automatically isolate breaches by restricting lateral movement proactively or during an active attack — across your cloud, endpoints, and data center environments.

À medida que mais pessoas do mundo se conectam cada vez mais e a superfície de ataque se expande, torna-se ainda mais essencial que as organizações definam, mapeiem e protejam as superfícies de proteção mais importantes em seus ambientes Zero Trust.  

No geral, estou impressionado com a ficha de informações da NSA. É um importante validador setorial do poder e do propósito da ZTS e deve servir como uma estrela norte para organizações que buscam construir resiliência cibernética diante das crescentes ameaças atuais.

‍Contact us today to learn more about getting started with Illumio ZTS at your organization.