The US military goes for zero trust

The US military goes for zero trust

The US Department of Defense (DoD) has released an official document detailing how it plans to integrate Zero Trust Network Access (ZTNA) across all of its departments, from technology to cybersecurity to human resources.

The "DoD Zero Trust Strategy" outlines how the entire Department of Defense and all of its departments must have the zero trust framework firmly in place by 2027.

"This change in philosophy is a significant change to legacy authentication and security mechanisms," the document reads. "This also represents a major cultural shift that stakeholders across the DoD ZT ecosystem, including the Defense Industrial Base (DIB), will need to embrace and execute beginning in FY2023 through FY2027 and beyond."

increasing attacks

Zero Trust is a relatively new concept in cybersecurity, which states that every person, device, or application on a network must be authenticated and verified. Nothing is approved by default.

To put it in a broader context, the Department of Defense said that the US government and its departments are experiencing increasing numbers of cyberattacks, which have become more devastating of late. At the same time, the change in the way people work (i.e. remote work) has only made it more difficult to secure the perimeter.

“Our adversaries are on our networks, mining our data and exploiting Department users,” the newspaper said. "The rapid growth of these offensive threats underscores the need for the Department of Defense to significantly adapt and improve our deterrence strategies and cybersecurity implementations."

Lee mas

> 5 common myths and surprising truths about Zero Trust

> What is Zero Trust network access?

> This is our roundup of the best endpoint protection tools right now

The project was launched by US President Joe Biden about 18 months ago, after the administration issued an executive order aimed at bolstering the government's defenses.

In addition to the Department of Defense, it has also urged the Cyber ​​Security and Infrastructure Agency (CISA) to update its infrastructure resiliency framework to guide state, local, and tribal entities as they work more on their cyber protections.

In addition, the Information Technology Industry Council (ITI) has asked the White House Office of Management and Budget (OMB) to further elaborate its recommendations on how to better secure software development.

Via: The Registry