Related Posts
Additional Posts in Cyber Security Bowl
Views on carbon black as a product?
Tell me it’s not true.

Anyone ever heard of or worked for Sygnia?
New to Fishbowl?
Download the Fishbowl app to
unlock all discussions on Fishbowl.
unlock all discussions on Fishbowl.



You may be right. But zero trust is a federal mandate and firms will try to sell their services to their clients based on these mandates. I’ve come to learn that it’s not actually about the best approach, it’s more about what can make the most money.
Couldn’t agree more with that. But also wanted to add onto making the company the most money, is saving the company money too. And putting in policies that may seem overkill is exactly what they’re intentions are. Best working approach has to adhere to that money prospect, obviously a business but still.
Zero trust was born out of the extended connectivity between different public and private technology infrastructures. The concept was then taken and developed further to apply within a single organization as well. Depending on the size and complexity of the organization, Zero Trust might or might not be considered an overkill. However, for Defense in Depth, there is no question about that. Ultimately, this all decided based on an organization's risk profile.
Mentor
Both defense in depth and zero trust are just general concepts. They are both good and you should be using both.