Anonymous ID: 36e0fd March 14, 2022, 7:31 p.m. No.15865253   🗄️.is đź”—kun   >>5313 >>5399

Door of all doors-

DoD?

 

Ask someone in federal IT what zero trust means and you’re likely to hear that it’s about access control: never granting access to any system, app or network without first authenticating the user or device, even if the user is an insider. The term “Never trust; always verify” has become a common way to express the concept of zero trust, and the phrase is first on the list of the Defense Information Systems Agency’s (DISA’s) explanation. For DISA, “Never trust; always verify” is followed by “Always act as if an adversary is already present in the environment,” and “Verify explicitly,” corresponding to the basic stage of the Department of Defense (DOD) Zero Trust Maturity Model. Similarly, NIST’s initial publication on Zero Trust Architecture emphasizes access control, calling the goal of zero trust “to prevent unauthorized access to data and services coupled with making the access control enforcement as granular as possible.”

The basic stage, access control, is indeed a critical first component of zero trust, and the DOD should be commended for undertaking it aggressively. The zero trust journey does not end there, however, and the recent nation-state attacks on U.S. government infrastructure via Solar Winds provide an even more compelling reason for the department to accelerate its move to the intermediate and advanced levels of zero trust.

The DOD’s own Digital Modernization Strategy has made one of its principal objectives to “treat data as a strategic asset,” and the department recently published a separate DOD Data Strategy that lists “data governance” as the first step to operationalizing the strategy. The application layer, layer seven, which speaks to app and data-centric security, is at the heart of zero trust.

https://www.afcea.org/content/signal-blog?q=node/22985

Anonymous ID: 36e0fd March 14, 2022, 7:36 p.m. No.15865280   🗄️.is đź”—kun

Bumble, bramble, which came first, sir,

Eggs or chickens? Who can tell?

I'll never believe that the first egg burst, sir,

Before its mother was out of her shell.

[Mary Mapes Dodge, "Rhymes and Jingles," N.Y., 1875]