Why should IT departments implement zero trust?
CTO in Software, 11 - 50 employees
Zero trust is more important now than ever as part of digital transformation and digital resiliency. It's not about slapping your hands. Zero trust does not mean I don't trust my employees. It means I have zero security wherever they are: They're in a coffee shop on public WiFi and I need to protect them. It's not that they're malicious. Too many people think the security team assumes they’re malicious, that's not true. They protect you against attacks you're not aware of. Maybe they haven't done a great job of communicating it, but zero trust means: I trust my employees implicitly and I don't trust the environment explicitly.C-Suite in Construction, 51 - 200 employees
Due to the more than ever increasing number of devices that need access to the system whether from within or remotelyContent you might like
First day on the job10%
Sometime during their first week52%
Sometime during their first month26%
2-3 months after their hiring date6%
It depends on their role/level3%
Other (explain in the comments section)1%
299 PARTICIPANTS
Director of IT in Healthcare and Biotech, 10,001+ employees
Here's a template that you can use: 1. Executive Summary
Background: Explain the objectives and risks and reasons the IAM is needed.
Specify the IAM governance scope (e.g., user access to systems, privileged ...read more
API security is our top priority8%
Very high48%
High34%
Medium9%
Low1%
API security is not at all a priority for us1%
101 PARTICIPANTS
Head of Cyber Security in Manufacturing, 501 - 1,000 employees
I would say, DPO and Security team both shall be involved and work hand in hand.Most of the time the legals and or DPO don't have the technical acumen to understand when data is floating to third party services.
Lets ...read more
Zero trust means I want my people to do the best thing possible, but I need to verify what they do because there are malicious actors out there. It’s a protection point on what activity is done.
Gartner’s analyst just said everybody's doing zero trust, but we're never going to be able to do that because our network is just not in a good place to do so. It's not unified, so zero trust doesn't even present itself as an option. We're left with either split tunneling via VPN or VDI, neither of which is an elegant solution.