{"id":25057,"date":"2023-09-21T16:19:58","date_gmt":"2023-09-21T14:19:58","guid":{"rendered":"https:\/\/datanets.ro\/faruk-hairedin-business-development-director-datanet-systems-we-need-zero-trust-as-cloud-and-remote-work-completely-changed-the-cybersecurity-landscape\/"},"modified":"2023-09-21T16:25:02","modified_gmt":"2023-09-21T14:25:02","slug":"interview-faruk-hairedin-bdd-zero-trust","status":"publish","type":"post","link":"https:\/\/datanets.ro\/en\/interview-faruk-hairedin-bdd-zero-trust\/","title":{"rendered":"Faruk Hairedin, Business Development Director Datanet Systems: We need Zero Trust [….]”"},"content":{"rendered":"

Nowadays, Zero Trust is the most promising cybersecurity approach, based on a simple but powerful concept \u201cNever trust, always verify<\/em>\u201d. This security model assumes that no user or device can be trusted by default, therefore all access to resources is restricted, and users must authenticate and authorize themselves before they are granted access. <\/strong><\/p>\n

As Romania is not exempt from the cybercrime wave that floods the global economy, Datanet Systems and Cisco offer organizations the technology, consultancy, and services needed to develop a modern Zero Trust architecture.<\/p>\n

 <\/p>\n

\"\"<\/p>\n

 <\/p>\n

Why is Zero Trust important?<\/strong><\/h2>\n

 <\/p>\n

In today\u2019s digitalization, mobility, and remote work expansion, defending a large perimeter has become challenging for organizations. Traditional solutions have already proven inefficient, and security teams are desperately looking for help.<\/p>\n

“In the past, defining the network infrastructure\u2019s perimeter was easy, and all those within the network were considered trusted and protected by a firewall, from outsiders. However, nowadays, this traditional approach falls short. The mediaconstantly reports on alarming incidents such as ransomware attacks, data theft, and compromised IT infrastructure. As the global cyber environment becomes increasingly complex, the challenges facing organizations grow in sophistication. In recent years, we have witnessed a surge in high-profile cyberattacks, targeting both public and private sectors, with attack volumes reaching over 100% growth since the onset of the Ukrainian war. These attacks have highlighted the need for organizations to adopt a more resilient and secure IT strategy,\u201d states<\/em>\u00a0Faruk Hairedin, Business Development Director la Datanet Systems.<\/strong><\/p><\/blockquote>\n

<\/h2>\n

What is Zero Trust in non-tech terms?<\/strong><\/h2>\n

 <\/p>\n

Zero Trust is a security model based on the principle of least privilege. This means that users and devices are only granted the access they need to perform their jobs and no more. Zero Trust also assumes that no user or device can be trusted by default and that all access to resources must be authenticated and authorized.<\/p>\n

\n

“These days, organizations heavily invest in securing networks and company systems, so breaching the firewall that protects the company\u2019s critical resources is highly changeling. However, it has become extremely easy to hack a user account, which leads to credential theft and enables more extensive attacks. Through social engineering or AI-based phishing schemes, users often fall into traps, becoming the weakest link in the security chain”, considers Faruk Hairedin.<\/strong><\/p>\n<\/blockquote>\n

In a traditional security architecture, trust is automatically granted through access authentication, which allows attackers to move freely once they infiltrate the systems via a compromised account. Zero Trust, however, grants trust to each activity, blocking lateral movements and securing all resources, including the cloud, hybrid environment, remote work endpoints, and BYOD.<\/p>\n

\n

“The novelty brought by Zero-Trust, as the name implies, revolves around the concept of \u2018implicit distrust.\u2019 Even a legitimate user, using a company-managed device and connected to a workplace\u2019s network, will no longer have automatic access to the company\u2019s resources and data. First of all, they will have to prove their trustworthiness. Depending on the level of trust verified, they will only receive access to the specific applications necessary, and their network activities will be continuously monitored. Should any event diminish the user\u2019s trust level, their network access will be automatically restricted”, mentioned Faruk Hairedin<\/strong>.<\/p>\n<\/blockquote>\n

There are four main functions of\u00a0 Zero Trust:<\/p>\n