Zero Trust Architecture: Foundational Concepts

This course explores Zero Trust architecture as the new standard for implementing robust security measures that protect against modern cyber threats by ensuring that no entity is trusted by default, whether it is inside or outside the network. It assesses the risks of perimeter-based security and implicit trust, explores the core Zero Trust principles and existing frameworks (with a strong focus on NIST SP 800-207), and covers how to implement Zero Trust using modern technologies and capabilities. Throughout the course, a fictitious company called Globomantics is used as a running scenario to put concepts into a realistic business context.

This module explores the risks that organizations face with traditional, perimeter-based security so that a strong business case can be built for Zero Trust initiatives. The fictitious company Globomantics is used throughout to put things into context: an organization that needs to improve its overall security posture. The module first covers the current technology landscape typical of an enterprise, then moves on to common security myths and misconceptions, the reality of insider threats, and the risks introduced by SaaS adoption and third-par...