Re:Implementing a Zero Trust Architecture
by TeeMassive on Wednesday August 10, 2022 @01:37AM
(#32408129)
> the context back then was don't trust an endpoint just because it is on your network.
I remember working for a major tech company that had contracts for big critical industries (think oil, aviation, trains, etc.). All the R&D department pretty much rested on one Brent, because they made no efforts to upgrade their systems for 15 years+.
tl;dr: I asked him: hey maybe we shouldn't trust devs computers just because they are "on the network", he just shrugged and said: "if we're compromised we'll have other things to worry about anyway".
While zero trust as a goal is impossible, it still is the guiding principle that everyone should follow; especially if you have a Brent.
I remember working for a major tech company that had contracts for big critical industries (think oil, aviation, trains, etc.). All the R&D department pretty much rested on one Brent, because they made no efforts to upgrade their systems for 15 years+.
tl;dr: I asked him: hey maybe we shouldn't trust devs computers just because they are "on the network", he just shrugged and said: "if we're compromised we'll have other things to worry about anyway".
While zero trust as a goal is impossible, it still is the guiding principle that everyone should follow; especially if you have a Brent.