Zero Trust Architecture

by Green-Ortiz, Cindy; Fowler, Brandon; Houck, David; Hensel, Hank; Lloyd, Patrick; McDonald, Andrew; Frazier, Jason

• ISBN13: 9780137899739
• ISBN10: 0137899734
• eBook ISBN(s): 9780137899609
• Edition: 1st
• Format: Paperback
• Copyright: 2023-06-04
• Publisher: Cisco Press
• More Book Details
• Purchase Benefits

Summary

Today's organizations need a new security model that more effectively adapts to the complexity and risks of modern environments, embraces hybrid workplaces, and protects people, devices, apps, and data wherever they're located. Zero Trust is the first model with the potential to do all that. Zero Trust Architecture: Theory, Implementation, Maintenance, and Growth is the first comprehensive guide for architects, engineers, and other technical professionals who want to move from Zero Trust theory to implementation and successful ongoing operation.

A team of Cisco's leading experts and implementers offer the most comprehensive and substantive guide to Zero Trust, bringing clarity, vision, practical definitions, and real-world expertise to a space that's been overwhelmed with hype. The authors explain why Zero Trust identity-based models can enable greater flexibility, simpler operations, intuitive context in the implementation and management of least privilege security. Then, building on Cisco's own model, they systematically illuminate methodologies, supporting technologies, and integrations required on the journey to any Zero Trust identity-based model.

Through real world experiences and case study examples, you'll learn what questions to ask, how to start planning, what exists today, what solution components still must emerge and evolve, and how to drive value in the short-term as you execute on your journey towards Zero Trust.

Table of Contents

Foreword

Introduction

Part I: Concepts

1. Overview of Zero Trust (ZT): It's a Journey

2. Cisco Zero Trust: Security Capability Requirements

3. Zero Trust Reference Architecture and Enclave Design

4. Security Capability Use Cases

5. Segmentation

Part II: Implementation

6. Segmentation Methods: Pros and Cons

7. Segmentation Foundational Functions and Applications (CMDB, App Inv, VLAN, Host Naming)

8. Map Functions to Segments / Implement Solutions

9. Test and Monitor ZT Segmentation and Solutions (LLD / SVS) - Phased

Conclusion (Journey)

Afterword

Bibliography

Acknowledgements