Project Zero Trust: A Story About A Strategy For Aligning Security And The Business

Description

Implement Zero Trust initiatives efficiently and effectively In Project Zero Trust: A Story About a Strategy for Aligning Security and the Business , George Finney, Chief Security Officer at Southern Methodist University, delivers an insightful and practical discussion of Zero Trust implementation. Presented in the form of a fictional narrative involving a breach at a company, the book tracks the actions of the company's new IT Security Director. Readers will learn John Kindervag's 5-Step methodology for implementing Zero Trust, the four Zero Trust design principles, and how to limit the impact of a breach. They'll also find: Concrete strategies for aligning your security practices with the business Common myths and pitfalls when implementing Zero Trust and how to implement it in a cloud environment Strategies for preventing breaches that encourage efficiency and cost reduction in your company's security practices Project Zero Trust is an ideal resource for aspiring technology professionals, as well as experienced IT leaders, network engineers, system admins, and project managers who are interested in or expected to implement zero trust initiatives. Review: Zero trust explained with real project - Cyber books are all so difficult to read and consume, this book style is not. Real easy read like a fictional thriller, gives you real world approaches and great knowledge base to build on with more focused books. Really enjoying. Review: A refreshing take on a complex topic - A refreshing take on a complex topic: learn about Zero Trust in an easy-to-follow and engaging fictional story. I recently had the opportunity to read "Project Zero Trust" and found it to be a refreshing take on the complex topic of Zero Trust in an organization. The author, George Finney, gets down to the fundamentals and focuses on what really matters, avoiding the use of technical weight and complex jargon. He presents the topic in a fictional story that has many parallels to the reality of today's businesses and their information security challenges. The story follows an organization that has been breached by a major cyber attack and their journey to recover from it, while adopting a new Zero Trust strategy in order to prevent and quickly contain future cyber attacks, reducing the impact to the business. In an industry that is overly saturated with "Zero Trust" claims on every security product and the term is often used just to boost sales, this book is clearly meant for those Security & Risk professionals, and even business leaders, who wish to understand what Zero Trust really means, the fundamental problems with the legacy trust model, and how a Zero Trust journey might be tackled in an organization in a way that supports the business and generates value. It goes back to the basics, building on top the Zero Trust Model fundamentals originally proposed by John Kindervag, to face the challenges that organizations are facing to contain the impact of cyber attacks/data breaches, despite vast amounts of money spent in security controls, due to a legacy trust model that's fundamentally broken. The Zero Trust Model tackles these challenges by revamping the concept of trust and assuming trust itself is a vulnerability. This book is very easy to read and follow through, even for those who are not tech-savvy, and yet it still provides good value by going back to the basics and demystifying what is really Zero Trust, and helping readers understand how it may translate to a real-world scenario with various examples of use cases within an organization. The author writes marvelously well and in a compelling manner that keeps the reader hooked to the plot. This book is definitely the first of its kind in my personal library, which is full of highly technical and often boring books. I would highly recommend it to anyone looking to gain a deeper understanding of Zero Trust and wishes to start a Zero Trust journey in his/her organization.