Close Menu
  • News
  • Home
  • In Profile
  • Finance
  • Legal
  • Technology
  • Events
  • Features
  • Wellbeing & Mental Health
  • Marketing
  • HR & Recruitment
  • About
  • Advertise
  • Events Calendar
  • Business Wall
  • Subscribe
  • Contact
  • 0843 289 4634
X (Twitter) LinkedIn YouTube
Trending
  • How Generative AI is Giving SMEs a Marketing Edge
  • £20k grant for female-founded SME up for grabs
  • Deploying fintech solutions to boost climate resilience for African farmers
  • An Interview with Alexandra Palt: A sustainability leader and L’Oréal’s CSO
  • How Three Small Businesses Are Winning Big With ERP
  • As Seen on BBC Panorama – Brad Burton to Headline The South West Expo in Swindon
  • New Industrial Strategy must spark growth and opportunity for small businesses
  • Selling a business: The steps too many owners miss
X (Twitter) LinkedIn YouTube
SME Today
  • About
  • Advertise
  • Events Calendar
  • Business Wall
  • Subscribe
  • Contact
  • 0843 289 4634
  • News
  • Home
  • In Profile
  • Finance
  • Legal
  • Technology
  • Events
  • Features
  • Wellbeing
  • Marketing
  • HR & Recruitment
SME Today
  • About
  • Advertise
  • Events Calendar
  • Business Wall
  • Subscribe
  • Contact
  • 0843 289 4634
  • Twitter
  • LinkedIn
  • YouTube
  • RSS
You are at:Home»Features»Zero Trust – The New Standard of Security?
zero-trust-the-new-standard-of-security

Zero Trust – The New Standard of Security?

0
Posted By sme-admin on September 9, 2021 Features, Technology

A Zero Trust security system is an approach to the design and implementation of information security systems that assume every user, device or application accessing an IT system is untrusted and must be treated with the same level of scrutiny. 

The traditional approach to computer security has long been based on perimeter defences being designed based on threat intelligence about the most likely attackers targeting a network or organization. These approaches have begun to struggle when faced with new types of attacks and evolutions in the threat landscape. 

Perimeter-based defences, such as firewalls or signature-based antivirus software are no longer sufficient to protect networks.

In this article, Charles Griffiths, Head of IT and Operations at AAG-IT.com shares his tips for implementing the strategy.

How can organisations adopt Zero Trust security principles?

Busy office with people on PCsRolling out Zero Trust across an entire organisation requires control over identities, devices, applications, data, infrastructure and networks. Zero Trust is not a single product or appliance to buy, but an ideology of security. It involves pulling the traditional perimeter back and combining traditional network access controls with user behaviour analytics (UBA) and micro-segmentation.

If you are planning on adopting Zero Trust initiatives in your organization, this is what you need to take into account:

  • Identities

Strong identities are a fundamental part of Zero Trust, and they’re critical for establishing trust and access within the environment. Strong identities are also important for supporting a Zero Trust framework because they are the basis of verifying users before accessing systems. One method of enabling strong identity is to leverage multi-factor authentication methods such as two-factor (2FA) or mobile authentication.

  • Multifactoral Authentification

Multifactor or continuous authentication is not a single approach, but several methods that can be deployed together to add levels of trust on top of an identity framework. The three basic approaches to authentication are:

  1. Single-factor authentication (SFA): This is based on something you know, such as a user ID and password or PIN. It’s the most common authentication method used today
  2. Multi-factor authentication (MFA): This is based on something you have, such as a security token, smart card or mobile device. MFA can be combined with SFA.
  3. Continuous Authentication (CFA): This is a method of confirming identity in real-time. It’s accurate, convenient and prevents attacks that have been successful in the past because it doesn’t rely on static data.

MFA and CFA are recommended levels of security within a Zero Trust framework.

  • Passwordless Authentication

We recommend methods of passwordless authentication to our clients such as the YubiKey. The Yubikey is a hardware-based device that replaces passwords. It’s a durable, inexpensive and convenient method of strong authentication that can also be used as a USB HID device or NFC.

  • Network Segmentation

Network segmentation and the ability to implement network controls allow for traffic policy to be implemented for each department and application. By taking advantage of micro-segmentation, a network can introduce finer levels of granular controls within the firewall or perimeter to limit access, protect against denial-of-service attacks, etc. NetSeg is a framework that enables this type of authentication framework in open source systems.

  • Secure ALL devices on your network

Allowing unaudited and unpatched devices onto your network has the potential to cause a lot of damage. In the past, it was fairly easy to block all devices that weren’t part of your network policies, but today’s world involves BYOD (Bring Your Own Device) and other scenarios where users and vendors connect new or unapproved devices to the network regularly. View every user device as a potential threat and limit access to sensitive resources.

  • Be specific with user roles and access

Security control should become an integral part of organisational policy. Roles and access should be as granular as possible, with clear definitions for each role. For a good example of this framework in action, take a look at AWS’s Identity and Access Management (IAM) framework. It has become one of the best examples of an effective identity framework thanks to its clear separation between roles and privileges.

———————————————————————————————————————

If you do plan on adopting Zero Trust initiatives in your organization then bear in mind the following advice:

A Zero Trust framework isn’t something that can be implemented overnight. Ensure you start in a test or development environment, and once the Zero Trust model has been successfully established, aim to implement it to your entire digital architecture.

Charles Griffiths from AAG.com further explains that “the best way to do something with “Zero Trust” seems to be to not have trust at all. As in, don’t rely on any single measure of security and make sure that your cybersecurity is complete from all angles without relying on a single form of protection as the end-all. Be aware of any potential security issues and be prepared right from the start. Only having one form of defence can leave you in a vulnerable position if that strategy fails (which it might), so invest in the many different forms of defence and be ready. Once it’s established, you’ll be good to go.”

 

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

How Generative AI is Giving SMEs a Marketing Edge

An Interview with Alexandra Palt: A sustainability leader and L’Oréal’s CSO

Selling a business: The steps too many owners miss

Comments are closed.

Follow SME Today on Linkedin and share all the topics you find interesting
Get £100 of free trades - ii trading account

The Newsletter

Join our mailing list for the best SME stories, handpicked and delivered direct to your inbox every two weeks!

Sign Up
Events Calendar
    • Marketing
    July 4, 2025

    How Generative AI is Giving SMEs a Marketing Edge

    June 25, 2025

    From PLT to Twitter X: Business Branding Decisions That Backfired

    • Finance
    July 4, 2025

    £20k grant for female-founded SME up for grabs

    July 4, 2025

    Deploying fintech solutions to boost climate resilience for African farmers

    • Health & Safety
    July 1, 2025

    Temperatures Soaring: Is Your Workplace Becoming Unsafe?

    January 29, 2025

    UK takeaways guilty of shocking hygiene failures:

    • Events
    July 4, 2025

    £20k grant for female-founded SME up for grabs

    July 2, 2025

    As Seen on BBC Panorama – Brad Burton to Headline The South West Expo in Swindon

    • Community
    June 23, 2025

    Celebrating One Year In Fairford Supporting The Community

    June 2, 2025

    National Charity Accelerates Children’s Reading Through New Corporate Partnership

    • Food & Drink
    June 23, 2025

    England Cricket Captain, Ben Stokes OBE, takes a stake in Spencer Matthews’ alcohol-free spirits brand, CleanCo

    June 16, 2025

    Hospitality industry risks collapse

    • Books
    April 24, 2025

    Values-Driven Professionalism: A Path to Client Loyalty

    December 2, 2024

    Banish the banshee boss: how to lead without fear – addressing the issue of fear-based management and how NOT to be this manager

    About

    SME Today is published by the same team who deliver The Great British Expos’. We have been organising various corporate events for the last 10 years, with a strong track record of producing well managed and attended business events across the UK.

    Join Our Mailing List

    Receive the latest news and updates from SMEToday.
    Read our Latest Newsletter:


    Sign Up
    X (Twitter) YouTube LinkedIn
    Most Recent Posts
    July 4, 2025

    How Generative AI is Giving SMEs a Marketing Edge

    July 4, 2025

    £20k grant for female-founded SME up for grabs

    July 4, 2025

    Deploying fintech solutions to boost climate resilience for African farmers

    July 3, 2025

    An Interview with Alexandra Palt: A sustainability leader and L’Oréal’s CSO

    July 3, 2025

    How Three Small Businesses Are Winning Big With ERP

    Categories
    • Books
    • Community & Charity
    • Education and Training
    • Environment
    • Events
    • Features
    • Finance
    • Food and Drink
    • Health & Safety
    • HR & Recruitment
    • In Profile
    • Legal
    • Marketing
    • News
    • Property & Development
    • Sponsored Content
    • Technology
    • Transport & Tourism
    • Wellbeing & Mental Health

    Copyright © 2020 SME Today.

    • ABOUT SME TODAY: THE GO TO RESOURCE FOR UK BUSINESSES
    • Privacy
    • Contact
    Copyright © 2025 SME Today.
    • ABOUT SME TODAY: THE GO TO RESOURCE FOR UK BUSINESSES
    • Privacy
    • Contact

    Type above and press Enter to search. Press Esc to cancel.