Zero Trust: Two Steps Forward, One Step Back

Another respondent said, “Zero trust addresses the modern challenges of today’s business, including securing remote workers, hybrid cloud environments, and ransomware threats.”  But according to another respondent, “It’s difficult to find human resources with zero-trust skills, and we don’t have supporting infrastructure and appropriate identity and access management (IAM) tools to enforce the zero-trust framework.” Despite its perceived importance, “getting upper management to completely sign off on the need for zero trust is also a challenge.” Key takeaways:Only 24% of respondents have partially or fully implemented zero trust. Respondents say they continue to struggle with understanding the principals and configuration of zero trust.

Nearly two-thirds of future zero trust adopters expect to have moderate difficulty in implementing it. Another 30% expect high difficulty. Pain points: ensuring it meets business needs, plays well with legacy apps and doesn’t disrupt user experience.

Of those who are more advanced in their zero-trust implementation, 69% are motivated by pressure to close data security holes. MFA, IAM and least privilege access are the most common components of zero-trust strategies and implementations. Only one-third have formal zero trust policies.

Zero trust marks a monumental shift in philosophy/practice. Respondents describe it as a “dramatic paradigm shift in security philosophy” that will require strategically reassessing how to secure the entire infrastructure to address challenges of remote or hybrid offices, multi-cloud environments, identity and authentication, and rapidly expanding endpoints.

In addition to survey insights, the report offers guidance to inspire organizations to pursue zero trust with greater awareness around implementation. For more detailed findings and analysis, the full research report is available for download here.