1. 2 + 2 +
The Zero-Trust Model
Redefining InfoSec

2. 2 +
Who am i?
This presentation is a product of the insane mind that is Chris Ruggieri

3. + 2
The What, how, and why
This presentation is a product of the insane mind that is Chris Ruggieri

4. What is the zero-trust model?
Identity is key. Never trust, always verify.
Network Micro-segmentation
Must know your data, the who, the where and the what
Must enforce least-privilege
Inspect and log all traffic
VPN is dead, trust me.
The Internet just became your network.
This presentation is a product of the insane mind that is Chris Ruggieri

5. How to create a zero-trust architecture2 +
How to create a zero-trust architecture
Inspection capabilities
Micro-segment both external perimeter and internal traffic
Provides network optimization
Provides visibility into traffic as it crosses multiple network functions
Most of all, change the way we think about InfoSec - The traditional “castle and moat” ideology is dead
This presentation is a product of the insane mind that is Chris Ruggieri

6. Title Identity is Key Micro-segmentation Draw on IAM strategy
Draw on MFA
Conditional policies
Big benefit of virtualization
Apply different policies to individual apps, even if they are on the same virtual server
Defines access by workload, application, VM, OS, or anything else you can think of.
Security through persistence. Network changes are less problematic
This presentation is a product of the insane mind that is Chris Ruggieri

7. Why zero-trust How does this affect my organization?
Increased visibility
Reduces lateral movement after attack
Reduces alerting time once an attack has occurred
Better Scalability
Again, Persistence!
Improved capabilities
This presentation is a product of the insane mind that is Chris Ruggieri

8. Title 2 +
Q&A
Be Gentle
This presentation is a product of the insane mind that is Chris Ruggieri

9. Hope I didn’t bore you too much2 + 2 +
THANK YOU
Hope I didn’t bore you too much