Zero trust is the biggest cybersecurity advancement in the past decade.

Identity & Access Management (IAM)Zero Trust

Strongly agree10%

Agree55%

Neutral24%

Disagree7%

Strongly disagree2%

233 PARTICIPANTS

2.2k views1 Upvote2 Comments

Sort by:

Director of Information Security in Healthcare and Biotecha year ago

We have had "trust but verify" and we have just evolved to automate this notion. However, I am with Nigel Hedges that Zero Trust is a bad name. The Zero Trust strategy has re-oriented the "trust but verify" idea by automating the validation of the components that we have evolved into using (identity, workload, data, network, etc.). However, not sure I would classify as the largest cybersecurity advancement; especially with AI/ML/LLMs, Quantum PQC, and other areas of advancement.

VP of Information Security in Retail2 years ago

Not to throw a cat amongst the pigeons here, and I know I've lost this battle, but I really don't like the name Zero Trust. I was asked a couple of years ago at the peak of hype in my country around zero trust, and I was that as far as investments go I would rather sell a poop-sandwich to my execs than lead with zero trust. Why? Because all business world wide since the dawn of time has been built on trust.

To be clear, I'm not against _everything_ that is behind the zero trust architecture and model, I'm a big believer in identity-first projects and need-to-know provisioning of all kinds... I just wish they'd picked a different name. Especially during a decade when the security function is trying to re-cast itself as enablers.

I hope the next concept paradigm to go viral has a better name.

Content you might like

Google plans to automatically set up two-factor authentication for 150 million accounts by the end of the year. Could this be a dangerous approach to securing their users?

Yes, users should be able to opt in vs. being autoenrolled.75%

No, all users should be autoenrolled for security purposes.24%

Can you walk us through your process for evaluating AI investments against core IT needs? What criteria do you use to determine when AI innovation is worth the potential trade-off?

How likely are you to use the new Azure OpenAI service?

We already have plans to use it8%

Very likely30%

Likely24%

Somewhat likely23%

Somewhat unlikely3%

Unlikely3%

Very unlikely

Unsure4%

View Results

What advanced identity analytics or continuous access controls is your organization using (or planning to implement)? Any lessons learned you can share regarding vendor selection or implementation?

Anyone using Hashicorp to drive privileged Access management PW compliance by any chance? if yes, any challenges pulling data from the solution and matching secrets to privileged IDs?