Understanding Zero Trust
52mBeginner2021-06-03
Authors

Malcolm Shore
Cybersecurity Expert, Former Director of GCSB
Course details
The traditional model of a firewalled enterprise separating trusted insiders from untrusted outsiders worked effectively for years, but it’s no longer a viable option in today’s world. Workers working remotely, insider threats, and attackers taking advantage of trust between internal systems—these demand a new approach to extending protection to all users and their devices, regardless of their location. In this course, Malcolm Shore shows how to better protect your networks and systems by adopting what’s known as a zero trust approach to access control—removing trust relationships in networks and requiring that trust decisions are made at the time that access is requested. Malcom starts with a brief history of the concept of software trust, before moving onto key facets of the zero trust approach, the reasons for wanting to minimize trust relationships in network architectures, and the tenets and models that have been proposed for zero trust.
Skills covered
Identity and Access ManagementCybersecurityOne-Off
Concepts
0. Introduction
- 01 - Using Zero Trust to protect against cyberattack
- 02 - What you should know
1. Background
- 03 - A brief history of technology trust
- 04 - Concepts of software trust
- 05 - A case study in failed trust
2. Zero Trust
- 06 - What is Zero Trust
- 07 - The principles of Zero Trust
- 08 - ACT-IAC and the six pillars of Zero Trust
- 09 - Policy-based admission control
- 10 - Zero Trust and the business context
- 11 - Zero Trust data
- 12 - An extended approach to Zero Trust
3. Implementing Zero Trust
- 13 - Building a Zero Trust foundation
- 14 - Designing a policy engine
- 15 - Examples of Zero Trust
Conclusion
- 16 - What's next