Implementing an entire architectural concept is challenging at best. Retrofitting Zero Trust Architecture (ZTA) into an existing architecture is beyond challenging; in fact, it may be impossible. In this session, we will explore the challenges of implementing ZTA within an existing enterprise architecture, calling out the key issues and considerations encountered in the journey, and where decisions must be made whether or not to proceed.
Citing several different enterprise implementations experienced by the speaker and his associates, we will explore the NIST 800-207 tenets and how they impact existing architectural models when attempting to implement them. We'll also address the compensating controls, accepted risks and models for communicating these to stakeholders.
Learning Objectives:
Describe the intent of Zero Trust Architecture, the primary models of implementation, and how each applies to your own IT ecosystem.
Define the areas within your own IT ecosystem where the application of Zero Trust Architectural concepts should be prioritized.
Evaluate and subsequently implement solutions to move towards Zero Trust Architecture implementation within your own IT ecosystem.