Zero trust, in practice

Key points

• Zero trust is a way of working, not a single product.
• Identity and device checks deliver most of the early benefit.
• Older systems can be protected by placing controls around them.

Start with identity

Strong sign-in, least-privilege access and regular access reviews remove the most common attack paths, and work across old and new systems alike.

Protecting what you cannot change yet

For systems that cannot be modernised soon, limit who and what can reach them, watch their traffic closely, and plan their replacement.

Talk to our cybersecurity team