A zero trust framework can significantly reduce a threat actor’s ability to move laterally within a network and greatly enhance an organization’s overall cybersecurity posture. Unfortunately, despite federal guidance, zero trust has not gained much momentum. The concept of zero trust, to “never trust, always verify,” may seem daunting. However, according to an article in ThreatPost, zero trust isn’t necessarily about buying the next shiny thing, but “a change in mindset on how one wishes to operate their business in a secure way.”

So how could organizations implement zero trust? “The first step should be creating a detailed inventory of all the devices, users and systems that exist within the network, which will help identify where security gaps may exist,” according to ThreatPost. Creating a zero trust culture within your organization is another important requirement. This occurs by getting executive and senior leadership support for a zero trust framework and training all staff on the importance of zero trust. In the end, zero trust is all about reducing your cyber risks and making it harder for threat actors to operate. Read more at ThreatPost.