Gap Analysis and Zero Trust

Gap Analysis

Roadmap for improving security

• Compare self-security to industry standard to improve

Zero Trust

Security Paradigm (Never Trust Always Verify)

Control Plane

(Brain / Make Decision)

Policy Engine

Take account info and apply rules & policies for a user

Policy Administrator

Fine tune policies

• Roles

• Permissions

Adaptive Identity

Adapts access requirement based off user behavior

Threat Scope Reduciton

Minimize attacks

• Micro-segmentation

• Least-privilaged

Policy-Driven Access Control

Examine all points and decide what authentication should be used

Data Plane

(Muscle) (Enforces)

Policy Enforcement Point (PEP)

Enforces Policy (Check Point)

• Firewall

• Switch

Implicit Trust Zones

Divides network to zones

• Isolated zones that grant access

Subject/System

Ensure system/subject are properly verified