InfoSecBulletin Cybersecurity for mankind
Nearly 90% of organizations have started adopting zero-trust security, but there is still a lot of work to be done, says a report from CISCO.
86.5% of global information security professionals have begun implementing parts of the zero-trust security model. However, only 2% have completed their deployments.
RockYou2024: Massive 10-Billion Password Leak
ISPC first get together held with a festive look
ISACA Dhaka chapter election
Iqbal hossain president, Azad secretary for ISACA Dhaka chapter
Emerging Eldorado ransomware focuses on Windows, VMware ESXi VMs
OVHcloud faces record 840 million DDoS Attack Using MikroTik Routers
New report; Polyfill[.]io Attack Impacts Over 380,000 Hosts
![New report; Polyfill[.]io Attack Impacts Over 380,000 Hosts](https://infosecbulletin.com/wp-content/uploads/2024/07/Untitled-1-8.jpg)
Apache HTTP Server Update Patches Critical Source Code Disclosure Flaw
Microsoft Uncovers Flaws in Rockwell Automation PanelView Plus
Researchers detect 28 new Ransomwares in June
Vote for DHAKA, Vote for ISACA at 6 July
Cisco measures maturity based on four “pillars”:
- Identity, which includes multi-factor authentication (MFA)
- Device, which includes continuous validation of users’ devices
- Network and workload, which includes network detection and response, as well as micro-segmentation
- Automation and orchestration, which includes security orchestration and automated response (SOAR)
ALSO READ:
Windows hello fingerprint auth bypassed on Microsoft, Dell, Lenovo laptops
Organizations don’t need to implement all four pillars of zero trust to see benefits. For instance, completing the identity pillar lowers the risk of ransomware events by almost 11%. Completing the network and workload pillar reduces the likelihood of malicious insider abuse by 9%.
Organizations that have implemented all four pillars have a big payoff. Only 2% of the survey sample falls into this category. These organizations are two times less likely to report security incidents compared to those who are just starting their zero-trust journey. To read the full report click here.
Big jump toward zero trust:
Survey results this year show that organizations are becoming more aware and mature regarding the concept of zero trust. This was noted by J. Wolfgang Goerlich, a Cisco Advisory CISO.“In past studies, a significant part of the sample said they had zero trust in place and were good to go.”
“This year we dug into the technology stack and asked them what technologies they were using, what zero trust aspects have they deployed,” Goerlich continues. “In doing that, our findings went from a large percentage of people saying they deployed zero trust to 2% saying they made progress across all the pillars. That reflects a maturation in security and IT leaders’ understanding of zero trust. Two years ago, people would say, ‘I did identity. I’m good.’ Now that they’re into a real strong push behind zero trust, they’re realizing they need device controls, network coverage, and automation and orchestration.”
“The more organizations know about zero trust, the less they feel competent in zero trust,” Goerlich adds. “The more they learn, the more they realize they need to go further.”
