NetworkNewsBreaks – SideChannel Inc. (SDCH) CEO
Post# of 91
SideChannel Inc. (OTCQB: SDCH) CEO Brian Haugli authored an article for the Cyber Defense magazine. The piece, titled “Micro-Segmentation: Where Does It Fit into Zero Trust?”, discusses a zero trust, a recent buzzword that is a concept not a technology, Haugli explained. He also notes that zero trust is not micro-segmentation, and he cautions companies not to be misled by vendors that tout that an implementation of a micro-segmentation solution equates to having a zero trust environment. Zero trust, says Haugli, “is a strategic initiative to create least privilege across all aspects of an organization. It requires the three elements of the triad in any program: people, process and technology. You generally need an inventory of the users in the environment, the applications in place and the supporting infrastructure. Without that inventory, a move towards zero rrust will be impossible.” He also goes on to observe that the basic requirement of micro-segmentation is expressly allow traffic from a source to a destination and deny all other traffic. “It’s one thing to build a program based on standards, but we must factor in the threats that are present that the program is built to reduce or stop,” wrote SideChannel CEO Brian Haugli in the article. “Cyber isn’t just addressing the defensive needs or accounting for the offensive threats. Ransomware is prevalent in our society today and an all-too-common news story both locally and nationally. When we look at why it’s so destructive, it’s not the encryption of one system that causes the pain, it is that the impact is across so many systems. This is allowed to happen from flat networks or lack of segmentation between work groups. A properly implemented micro-segmentation technology coupled with a strong managed policy would significantly reduce or even stop ransomware’s lateral movement across an environment. . . . The first question to answer is whether you have a cyber program built to a standard, such as NIST CSF. Then it’s onto how your organization meeting is each of the applicable controls. As you define your remediations and mitigations, a micro-segmentation solution should make its way into your plan to address identified gaps in controls. These are your first steps in the march towards zero trust.”
Please see full disclaimers on the NetworkNewsWire website applicable to all content provided by NNW, wherever published or re-published: http://NNW.fm/Disclaimer