What is Zero Trust?
Detection, response, and recovery are no longer sufficient - containment is essential.
Effective containment begins with an "assume breach" mindset which in turn drives a least-privilege approach to building security controls - this is Zero Trust.
An “assume breach” mentality delivers modern security
Starting with the premise that the unexpected can happen at any time drives the following behaviors:
Visibility everywhere
Ensure that every interaction on the network is accounted for
Least-privilege access
Prevent unexpected breaches from propagating
Adaptability and consistency
Guarantee consistent network behavior everywhere
A proactive posture
Always be on the lookout for an attack
These are the principles of Zero Trust security and are essential in supporting modern business needs.
What is a Zero Trust architecture?
- Everything (data, users, devices, etc.) is considered to be a resource
- All communications are secured regardless of location
- Access to individual resources is granted on a per-session basis
- Access to resources is governed by dynamic policy
- Integrity and security posture of all enterprise-owned assets are monitored
- Authentication and authorization are strictly enforced before access is granted
- Constantly monitor the state and activity of resources to improve their security posture
How Illumio helps
See and understand risk
Understand relationships and communications to map exposure risk of systems and data
Establish the right protection
Identify the right security posture and secure applications through least privilege policies
Respond to changes
Ensure Zero Trust security posture adapts to changes in your environment to maintain the least privilege state
Related Resources
Zero Trust Impact Report
Discover the impact of ZTS in the global research from ESG.
4 Steps to Zero Trust Segmentation
Capture quick wins, improve your security, and quickly build Zero Trust.