Zero Trust Security: An Enterprise Guide

by Jason Garbis, Jerry W. Chapman

Overview

Understand how Zero Trust security can and should integrate into your organization. This book covers the complexity of enterprise environments and provides the realistic guidance and requirements your security team needs to successfully plan and execute a journey to Zero Trust while getting more value from your existing enterprise security architecture. After reading this book, you will be ready to design a credible and defensible Zero Trust security architecture for your organization and implement a step-wise journey that delivers significantly improved security and streamlined operations.

Zero Trust security has become a major industry trend, and yet there still is uncertainty about what it means. Zero Trust is about fundamentally changing the underlying philosophy and approach to enterprise security—moving from outdated and demonstrably ineffective perimeter-centric approaches to a dynamic, identity-centric, and policy-based approach.

Making this type of shift can be challenging. Your organization has already deployed and operationalized enterprise security assets such as Directories, IAM systems, IDS/IPS, and SIEM, and changing things can be difficult. Zero Trust Security uniquely covers the breadth of enterprise security and IT architectures, providing substantive architectural guidance and technical analysis with the goal of accelerating your organization‘s journey to Zero Trust.

What You Will Learn

• Understand Zero Trust security principles and why it is critical to adopt them
• See the security and operational benefits of Zero Trust
• Make informed decisions about where, when, and how to apply Zero Trust security architectures
• Discover how the journey to Zero Trust will impact your enterprise and security architecture
• Be ready to plan your journey toward Zero Trust, while identifying projects that can deliver immediate security benefits for your organization

Who This Book Is For

Security leaders, architects, and practitioners plus CISOs, enterprise security architects, security engineers, network security architects, solution architects, and Zero Trust strategists

Product Details

ISBN-13:	9781484267011
Publisher:	Apress
Publication date:	02/27/2021
Edition description:	First Edition
Pages:	300
Product dimensions:	7.01(w) x 10.00(h) x (d)

About the Author

Jason Garbis is Founder and Principal at Numberline Security, a consulting firm helping enterprises prepare for, define, and execute on effective Zero Trust security strategies. Jason has authored several books, including Zero Trust Security: An Enterprise Guide, and Getting Started With Zero Trust. He is co-chair of the Zero Trust Working Group at the Cloud Security Alliance, and is a frequent speaker at industry conferences. Jason holds a CISSP certification, has a BS in Computer Science from Cornell University, and an MBA from Northeastern. Professionally, he has expertise in the areas of Identity Management, Enterprise Security Architectures, Network Security, and Security Strategy. Previously, he served as Chief Product Officer at Appgate, and held roles at security firms including RSA and Aveksa.

Jerry W. Chapman is a cyber security professional with a focus on Identity. With over 25 years of industry experience, Jerry has successfully guided numerous clients in the design and implementation of their enterprise IAM strategies, in ways that align with both security and business objectives. As an IAM industry expert, Jerry provides guidance, support, and thought leadership across multiple cybersecurity practice areas, with a focus on positioning Identity as a core component within enterprise security architectures. Jerry is active in the technical working group at the Identity Defined Security Alliance (IDSA), where he was the group’s original Technical Architect. Jerry is a certified Forrester Zero Trust Strategist, has a BS in Computer Information Systems from DeVry University and is currently pursuing a degree in Applied Mathematics from Southern New Hampshire University.

Table of Contents

Part I: Overview.- Chapter 1: Introduction.- Chapter 2: What Is Zero Trust?.- Chapter 3: Zero Trust Architectures.- Chapter 4: Zero Trust in Practice.- Part II: Zero Trust and Enterprise Architecture Components.- Chapter 5: Identity and Access Management.- Chapter 6: Network Infrastructure.- Chapter 7: Network Access Control.- Chapter 8: Intrusion Detection and Prevention Systems.- Chapter 9: Virtual Private Networks.- Chapter 10: Next-Generation Firewalls.- Chapter 11: Security Operations.- Chapter 12: Privileged Access Management.- Chapter 13: Data Protection.- Chapter 14: Infrastructure and Platform as a Service.- Chapter 15: Software as a Service.- Chapter 16: IoT Devices and “Things”.- Part III: Putting It All Together.- Chapter 17: A Zero Trust Policy Model.- Chapter 18: Zero Trust Scenarios.- Chapter 19: Making Zero Trust Successful.- Chapter 20: Conclusion.- Chapter 21: Afterword.- Appendix A: Further Reading.-