This course will teach you the steps involved in establishing a zero trust architecture.

Zero Trust has become one of cybersecurity’s latest buzzwords. Therefore it is really to understand what Zero Trust is and how it works.

Why is Zero Trust important?

Zero Trust is one of the most effective ways for companies to control access to their networks, applications, and data. It combines a wide range of preventative techniques including identity verification and behavioral analysis, micro-segmentation, endpoint security and least privilege controls to deter would-be attackers and limit their access in the event of a breach. Considering all such issues and drift towards cloud has created a paradigm sift, It is not enough to establish firewall rules and block by packet analysis – a compromised account that passes authentication protocols at a network perimeter device should still be evaluated for each subsequent session or endpoint it attempts to access.

Therefore, by segmenting the network by identity, groups, and function, and controlling user access, Zero Trust security helps the organization contain breaches and minimize potential damage. This is an important security measure as some of the most sophisticated attacks are orchestrated by rogue credentials.

When organizations will invest in a Zero Trust solution, they can use solution reduce security complexity, save money, and reduce time to identify and remediate breaches.

In summary, achieving Zero-Trust does not require adoption of any new technologies. It’s simply a new approach to cybersecurity to “never trust, always verify,” or to eliminate any and all trust, as opposed to the more common perimeter-based security approach that assumes user identities have not been compromised, all human actors are responsible and can be trusted. The concept of trusting anything internal to our networks is fundamentally flawed as evidenced by all the data breaches in the news, with most of the breaches caused by misuse of privileged credentials

In this course you will learn following concepts and each Concept has further topics

1) Some Basics about Zero Trust

1. History of Zero Trust

2. What is Zero Trust

3. Why Zero Trust

4. Issues Solved by Zero Trust

2) Zero Trust : Current State and Implementation challenges

1. Evolution of Zero Trust

2. Present State of Zero Trust

3. Challenges in Zero trust Implementation

3) NIST Guidance on building Zero Trust Architecture

1. What Is Zero-Trust Architecture (ZTA)?

2. NIST’s 6 Key Tenets of Zero Trust Architecture

3. Part 1: Overview of NIST Zero Trust Architecture

4. Part 2: Logical Components NIST Zero Trust Architecture

5. Part 3: Logical Components NIST Zero Trust Architecture

4) The 5 Basic Steps to Building a Zero Trust Network

1. Step 1 : Define Attack Surface

2. Step 2 – Implement Controls Around Network Traffic

3. Step 3: Plan your Zero Trust Network

4. Step 4 : Design Your Zero Trust Policy

5. Step 5: Monitor and maintain networks

6. Bonus : Guides on Zero Trust

5) Demo :Implement Zero Using Conditional Access Policies

1. Six foundational pillar

2. Overview of Azure Conditional Access Policies

3. Implement Conditional access using MFA

6) Zero Trust Architecture - Use Cases

1. Maintain Compliance

2. Securing Cloud Migrations

3. DevOps and Continuous Delivery

In summary, achieving Zero-Trust does not require adoption of any new technologies. It’s simply a new approach to cybersecurity to “never trust, always verify,” or to eliminate any and all trust, as opposed to the more common perimeter-based security approach that assumes user identities have not been compromised, all human actors are responsible and can be trusted. The concept of trusting anything internal to our networks is fundamentally flawed as evidenced by all the data breaches in the news, with most of the breaches caused by misuse of privileged credentials.