book

Zero Trust Overview and Playbook Introduction

Name: Zero Trust Overview and Playbook Introduction
ISBN: 9781800568662

by Mark Simos, Nikhil Kumar

October 2023

Beginner to intermediate

240 pages

6h 44m

English

Packt Publishing

Read now

Unlock full access

Zero Trust Overview and Playbook Introduction
ForewordContributorsAbout the authorsAbout the reviewer
Preface
Who this book is forWhat this book coversTo get the most out of this bookConventions usedGet in touchShare Your Thoughts
Chapter 1: Zero Trust – This Is the Way
Introducing Zero TrustIntroducing the Zero Trust Playbook SeriesCommon Zero Trust questionsSummary
Chapter 2: Reading the Zero Trust Playbook Series
Reading strategiesHow we structured the playbooksZero Trust Overview and Playbook IntroductionBusiness and Technical Leadership PlaybookTechnical Topic PlaybooksFuturesSummary
Chapter 3: Zero Trust Is Security for Today’s World
Continuous change and why we need Zero TrustChanges come faster in the digital ageDefining success in the digital ageTechnology accelerates change and complexityA darker trend – the growth of cybercrimeStaying balanced – assume failure and assume successCybersecurity or information security?Implications and imperatives of Zero TrustIt’s a team sportSecurity must be agileFailure is not an optionDispelling confusion – frequently asked questions on Zero TrustAren’t attackers just kids in their basements playing on computers?Shouldn’t security have solved this simple technical problem by now?Who are the attackers?Can’t we just arrest these criminals and put them in jail?Is this just a matter of spending more money?If I have a Zero Trust strategy and funding, can I make this go away quickly?Can we ever be completely safe? What should I do about it?Is this cyberwar?What are the most damaging attacks?What does success look like for security and Zero Trust?Why is Zero Trust so confusing?How do I know if something is Zero Trust?Summary
Chapter 4: Standard Zero Trust Capabilities
Consistency via a simple model and durable capabilitiesThe Open Group Zero Trust Reference ModelSecurity disciplinesDigital ecosystems and business assetsKey Zero Trust capabilitiesCapabilities as a common language of securityZero Trust capabilities referenceDoes Zero Trust include network security?Summary
Chapter 5: Artificial Intelligence (AI) and Zero Trust
What is AI?What will the impact of AI look like?What are the limitations of AI?AI models do not “understand” anythingAI models reflect any biases in their dataHow can Zero Trust help manage AI security risk?Zero Trust – the top four priorities for managing AI riskHow will AI impact Zero Trust?Summary
Chapter 6: How to Scope, Size, and Start Zero Trust
Agile security – think big, start small, move fastWhat is agile security?Applying agility in practiceFocus on progress instead of perfectionAlways ruthlessly prioritizeMyths and misconceptions that block security agilityPursuing perfect security is a delusionPursuing perfect solutions is a perfect wastePerfect plans are perfectly fragileScoping, sizing, and starting Zero TrustWill Zero Trust work in my organization?Is it better to go big or plan smaller projects?Large Zero Trust transformations are the most effectiveGood communication can catalyze executive sponsorshipStarting small is sometimes requiredHow do I ensure Zero Trust stays on track and continuously delivers value?What is the best place to start Zero Trust?Key terminology changes and clarificationNewer terminology – technical estateDisambiguation – operations, operational, operating model, and so onSummary
Chapter 7: What Zero Trust Success Looks Like
Zero Trust success factorsFactor one – clear strategy and planFactor two – security mindset and culture shiftsSecurity risk is business riskSecurity is a business enablerSecurity is everyone’s responsibilitySecurity risk accountability starts at the topAssume compromise (assume breach)Explicit validation of trustAsset-centric and data-centric securityCybersecurity is a team sportFactor three – human empathyZero Trust provides a competitive advantageKey cultural themesSummary
Chapter 8: Adoption with the Three-Pillar Model
Introduction to the three pillarsPlaybook structurePlaybook layoutThe strategic pillarThe operational pillarThe operating model pillarStitching it all together with the Zero Trust PlaybookZero Trust integration drives changesSummary

Chapter 9: The Zero Trust Six-Stage Plan
Overview of the six-stage planUsing the playbook stages effectivelyThe playbook stages in detailStage 1 – Establish a strategyStage 2 – Set up an operating modelStage 3 – Create the architecture and modelStage 4 – Tailor to the businessStage 5 – Implement and improveStage 6 – Continuously monitor and evolveSummary
Chapter 10: Zero Trust Playbook Roles
Role-based approachIntegration of roles with the six-stage planZero Trust affects everyoneRole definition and namingIllustrative list of rolesPer-role guidanceRole mission and purposeRole creation and evolutionKey role relationshipsRequired skills and knowledgeTooling and capabilities for each roleZero Trust impact and imperatives for each rolePlaybook-stage involvement for each roleA day in the life of Zero Trust for each roleDefining and measuring successSummary of per-role guidanceMaking it realSummaryBook 1 summaryWhat’s next in The Zero Trust Playbook Series
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your Thoughts

Overview

This book, 'Zero Trust Overview and Playbook Introduction,' provides clear and actionable guidance for implementing a Zero Trust architecture in your organization. By leveraging insights from experienced authors and global standards, you will learn how to navigate the complex landscape of cybersecurity for digital transformations.

What this Book will help me do

Understand the 'Zero Trust' framework and its key principles.
Gain insights into tailoring Zero Trust strategies for different organizational roles.
Learn how to mitigate ransomware, breaches, and cybersecurity threats effectively.
Explore real-world examples of Zero Trust architecture deployments.
Adopt a six-stage approach to plan and operationalize Zero Trust strategies.

Author(s)

Mark Simos and Nikhil Kumar bring extensive industry expertise and practical experience to the book. They are committed to sharing best practices for cybersecurity and Zero Trust frameworks. Their approach combines up-to-date threat landscapes with actionable steps based on proven methodologies.

Who is it for?

The ideal reader is a professional in cybersecurity, business leadership, or IT strategy seeking guidance on implementing Zero Trust architectures. If you are a CIO, CISO, or IT manager, this book is designed to empower you with the knowledge to lead your organization through modern cybersecurity transformations. Additionally, technical roles such as engineers and architects will find detailed strategies tailored to their needs.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781800568662

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills