Zero Trust Security

Chapter 13 Journey from Flat Network to Zero Trust

Through this book, we’ve embarked on a journey to transform our network architecture from a flat, open network into one that is more secure and resilient – a Zero Trust Network. Let’s recap how we achieved this transformation and the principles we followed along the way. They start by first laying out the design principles of Zero Trust that we have followed in this book. They are the guiding principles of how we identify and evaluate the security controls that we need to implement in our organisation.

The design principles of Zero Trust:

1. Define Business Outcomes: Define what the business is trying to achieve, and identify how security initiatives will affect the business. The fictive company we are working with, Juice Factory, is a manufacturing business that produces juice products for its customers.
2. Design from the Inside Out: Starting with the things that are most important for the organisation, the crown jewels. For us, it is the factory. From there, try to understand why and how the crown jewels interact with the rest of the organisation and external systems. Allowing us to determine which controls to implement to reduce the likelihood of a cyber event.
3. Determine Who Needs Access: This all comes down to allow-listing for both users and systems. Based on the information from the previous stage. By following the principle of need to know, we determine who needs access based on their job role and who does not. Reducing ...