There Is No Zero Trust In Zero Trust
In January, the Cloud Security Alliance asked security professionals how they handle the identities on which their AI systems run. Fewer than a quarter of organizations had a documented, formally adopted policy for creating or removing one. More than 16% do not track when a new identity is created at all. Those identities hold tokens and standing access to production systems, and the people accountable for governing access have, by their own account, no record of them.
Authentication answers only half the question
This is the quiet arithmetic behind a phrase the industry has repeated for a decade: identity is the new perimeter. The phrase earned its place by moving the control point off the network and onto the identity. What it left unfinished is the harder half. It answers how something gets in, but not what it can reach once inside, who approved that access, or how far the...
Copyright of this story solely belongs to informationsecuritybuzz.com. To see the full text click HERE
