Intelligent CIO Middle East Issue 36 | Page 79

INTELLIGENT BRANDS // Enterprise Security POWERED BY The new security mandate: Never trust, always verify ///////////////////////////// Organisations are coming to realise that merely a user name and password are not enough to secure their cyber existence. And as Kamel Heus, Regional Manager, MEA at Centrify, explains a ‘zero trust security approach’ is increasingly gaining acceptance. www.intelligentcio.com T he concept of zero trust is as profound in cybersecurity as the sweeping transformation generated by the arrival of cloud, mobility agility and availability. Gartner projects that worldwide security spending will reach US$96 billion this year, yet we continue to read headlines validating that companies can’t address the threats fast enough, regardless of the growing list of vendors and solutions available. What’s even more surprising is that less than 10% of that spend is allocated for identity and access management. Repeated mega breaches in cybersecurity have forced experts and vendors to relook at the basic underlying best practices and assumptions that have been adopted in the past and question their viability. The revolutionary concept of zero trust security assumes that the threat actor may be already within an organisation and is posing as an employee. Or alternatively, has assumed the credentials of an employee. The concept of zero trust seeks to limit the opportunity of such an internal threat actor to use the assumed employee credentials and breach other parts of the organisation. INTELLIGENTCIO 79