Zero Trust Best Practices in Government and Federal Industries
summary
Defines a practical Zero Trust path with concrete tools and numbers rather than buzzwords: use Azure AD Conditional Access for policy-based MFA and anomalous geolocation blocks, feed signals into Sentinel UEBA to baseline entities, and run Defender for Cloud initiatives (over 200 checks mapped to NIST 853) to catch misconfigurations. Trainable classifiers find patterns after ~60 examples (used to locate check numbers), Cloud Discovery maps 31,000 app risk scores, DoD mapping shows 152 activities to reach a high baseline, response automation ties it together.
AI-written summary · about
chapters (30)
- 0:00Zero Trust in government
- 1:07Why zero trust matters
- 2:33Zero Trust principles
- 4:59Drivers for Zero Trust
- 7:05Applying Zero Trust
- 8:09Securing remote identity
- 9:11Protecting diverse endpoints
- 9:54App access vs security
- 10:16Data protection in cloud/on-prem
- 10:38Infrastructure security fast
- 11:00Network segmentation
- 12:04Microsoft tools for Zero Trust
- 12:47Azure AD Conditional Access
- 14:10Detecting anomalies with UEBA
- 15:14Endpoint security updates
- 15:57Managing unsanctioned apps
- 17:22Classifying sensitive data
- 18:48Cloud security posture management
- 20:35Network segmentation with Azure Firewall
- 21:38Turning signals to insights
- 22:20Virtual security team with Microsoft
- 23:25Zero Trust workbook
- 24:49Augmenting human teams with AI and automation
- 25:52Insider threats in Zero Trust
- 27:38Zero Trust TCO
- 29:00Tool investment vs capacity
- 30:07Zero Trust future with AI
- 30:48Audience insights
- 32:14Managed workload identity challenges
- 33:18Closing remarks and Q&A
related talks
42mImplementing Zero Trust in Government Settings: Strategies, Challenges, and Best Pra...
40mZero Trust in a Post-pandemic World
47mThwarting the Adversary: Bending the Zero Trust Curve to Defense
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
27mA Simplified and Practical Approach to Pursuing a Zero Trust Architecture
28mZero Trust Architecture - Now We Must, But What It Means?
40mZero Trust and Privacy: Moving Security Closer to the Target
31mAttacking Zero Trust Designs in 2021