In Zero Trust We Trust

Avinash Naduvath is a renowned security architect in the Customer Experience (CX) Security Services division at Cisco Systems. As part of CX-Security, he has delivered multiple solutions to help secure customer networks. The range of services included incepting secure architectures, designs, technology advisories, best practice recommendations, and security assessments.  Prior to his current role in Cisco, Avinash was part of the technical services for security in Cisco-Bangalore and has helped troubleshoot and secure networks for multiple customers. He is a subject matter expert in next-generation firepower technology. Previous to this, Avinash was part of the professional services team in Cisco-Bangalore as a network consulting engineer.  Avinash has over 10 years of experience in the information security domain, having worked on multiple aspects of security such as secure engineering and secure architecture. He has a passion for offensive security and has spoken on various topics at conferences such as Cisco SECCON and the Offensive Summit held at Cisco. Avinash has also contributed to and created multiple automation projects that have helped accelerate the security business. He is currently based in Singapore and enjoys presenting topics relevant to Zero Trust and its adoption.  He holds a master’s degree in software systems from BITS Pilani, and is a Certified Information Systems Security Professional (CISSP), Cisco Certified Internetwork Expert—Security (CCIE), CompTIA Advanced Security (CASP+) practitioner, SABSA Charted Architect–Foundations and has acquired Cloud Security Alliance’s Certified Competence in Zero Trust (CCZT) among many security-based certifications he has accumulated during the course of his career. Avinash is a Certified Forrester’s Zero Trust Adoption practitioner and is also the author of the award-winning fictional novel Mindbender (Literary Titan Silver Book Awardee and a Feathered Quill finalist).

• Introduction xxiPhase 1 Mindset 1Chapter 1 When It All Begins 3Interview Strategies 4Key Zenith Trust Bank Stakeholders 5Endnote 12Chapter 2 The Zero Trust Kaleidoscope 13Delay in Adoption 14Peeling the Zero Trust Onion 22Endnotes 28Chapter 3 Defining Zero Trust 31Zero Trust Is Not… 32The Core of the Zero Trust Onion 37Are We Crying After Peeling the Onion? 39Rethink Security: A Common Breach Scenario 39Concepts and Tenets of Zero Trust 40Zero Trust Catalysts 46Endnotes 53Phase 2 Align to the Business Vision and Mission and Craft Metrics for Success 55Chapter 4 Always Start with “Why” 57Take the Time to Ask Why: Understanding the Vision 58Aligning Zero Trust with the Enterprise Mission 59Common Drivers for Zero Trust Adoption 73What Matters Is Why 99The Interview 99Endnotes 102Chapter 5 Measuring Zero Trust Success 103Importance of Measurement 104The Metrics Lifecycle 105A Hybrid Approach 132The Follow-Up 133Endnote 138Chapter 6 Understanding Zero Trust Maturity 139The Five Pillars of Maturity for Zero Trust 140Zero Trust Maturity Levels 157Zero Trust Maturity Goals 160Measurement of Maturity 162Zero Trust Scoring Process 172The Follow-Up 174Endnotes 181Phase 3 Identify Key Stakeholders and Enable a Zero Trust Team 183Chapter 7 Zero Trust Avengers, Assemble! 185Why Is the Team Critical? 185Strategy and Deployment: Two Sides of a Coin 187Security Ownership 188Breaking the Barrier (Infrastructure, Operations, and Security) 189DevSecOps and Its Relevance to Zero Trust 190Key Stakeholders in a Zero Trust Team 194Managing Your Stakeholders 204Security Culture: The Last Piece of the Puzzle 206The Follow-Up 209Endnote 209Phase 4 Develop the Target Zero Trust Architecture 211Chapter 8 Building a Zero Trust Architecture 213A Typical Enterprise Architecture 214A Zero Trust Architecture Overlay 225Conceptual Zero Trust Architecture 230What Does a Zero Trust Policy Look Like? 240Information Flow in the Zero Trust Architecture 243Basic Flows in a Zero Trust System 243Software-Defined Perimeter 252The Deep Dive 260Endnote 261Chapter 9 Critical Security Mechanisms for Zero Trust Architectures 263Zero Trust Mechanisms for Subjects (Users and Devices) 263Zero Trust Mechanisms for Networks (Workplace) 278Zero Trust Mechanisms for Data and Applications 285Zero Trust Mechanisms for Visibility with Security Orchestration and Automation 289The Deep Dive 303Endnote 304Phase 5 Present the Zero Trust Strategy and Metrics 305Chapter 10 Presenting the Zero Trust Strategy 307Presenting Zero Trust to the Enterprise 308The Presentation 316Phase 6 Implement, Monitor, Feedback, Repeat 325Chapter 11 Implementation and Continuous Monitoring 327Do Not Ignore Your Current Gaps 328Frameworks Are Only a Reference 328Adopt Agile for Initiatives and SAFe for the Strategy Delivery 328Implement the Vision 331Monitor and Enhance 336The Serendipitous Meeting 337Chapter 12 The Road Ahead 339A Trusted Zero Trust Partner 342Aim Higher, Together 343Endnote 343  9780138237400, TOC, 1/23/2024