云安全联盟-走向零信任架构：面向复杂和混合世界的指导性方法（英）.pdf

Toward a Zero Trust Architecture A Guided Approach for a Complex and Hybrid World © 2021 Cloud Security Alliance – All Rights Reserved. You may download, store, display on your computer, view, print, and link to the Cloud Security Alliance at subject to the following: (a) the draft may be used solely for your personal, informational, non-commercial use; (b) the draft may not be modified or altered in any way; (c) the draft may not be redistributed; and (d) the trademark, copyright or other notices may not be removed. You may quote portions of the draft as permitted by the Fair Use provisions of the United States Copyright Act, provided that you attribute the portions to the Cloud Security Alliance. © Copyright 2021, Cloud Security Alliance. All rights reserved. 2 Abstract Enterprise stakeholders must consider the challenges of increased real-time system complexity, the need for new cybersecurity policy, and the strong cultural support that is required to securely operate systems in a complex and hybrid world. Emerging technology solutions and approaches such as Zero Trust are critical to meeting the mandates in United States President Biden’s Executive Order 14028, Improving the Nation’s Cybersecurity. The implications of an emerging, rich, and diverse solutions landscape and the challenges to an organization’s ability to ultimately deliver a Zero Trust architecture (ZTA) are explored in this paper. Recommendations are discussed for how industry can improve collaboration among key stakeholder groups to accelerate both enterprise leaders’ and security practitioners’ adoption of Zero Trust into their environments. A Product of the Cloud Security Alliance – Washington DC Chapter (CSA-DC) Research Committee Research Committee Chair: Mari Spina © Copyright 2021, Cloud Security Alliance. All rights reserved. 3 Acknowledgments Authors: Juanita Koilpillai Jyoti Wadhwa