How to bluff your way into Zero Trust (WHY2025)

Zero Trust (ZT) is a security paradigm gaining traction and popularity. In the talk I will show how ZT is the progression of many security ideas that you may already be familiar with, and how you can rebrand and review what you are already doing to show that you are making progress. Zero Trust (ZT) is a security paradigm gaining traction, especially in the US defense community. The underlying idea is to reduce implicit trust as much as possible. This makes great sense from a security perspective. Its implementation is daunting though, because it is not about dropping a new product in the security landscape. Instead, it is more an approach and a process. It is still hard to prioritize ZT and to retrofit it to existing system architectures. In the talk I will show how ZT is the progression of many security ideas that you may already be familiar with, and how you can rebrand and review what you are already doing to show that you are making progress. Outline: As a contributor to the Cloud Security Alliances Zero Trust cert (CCZT), and experienced instructor, I intend to borrow from the (public) body of knowledge and my experiences in teaching that. This will give the audience a good insight in Zero Trust content and trends. This will include - the core idea (never trust, always verify) - the major use cases - business value of ZT - steps in implementing - publicly available maturity models - example implementations and status thereof (e.g. US Airforce) - link to earlier principles - retrofitting ZT on an existing application - experiences Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://program.why2025.org/why2025/talk/BVSMJZ/