Economics of Zero Trust
summary
Argument frames Zero Trust as an economic tradeoff: attackers compare risk versus reward while defenders must count development, operations and annualized loss expectancy to decide investments. Practical steps show moving from IP/port rules to SPIFFE identity bound policies, treating internal and external systems uniformly, and building control/automation around identity. Concrete work includes adding AWS KMS support to lower integration cost and reduce vendor lock‑in, enabling cross‑cloud identity reuse.
AI-written summary · about
chapters (6)
related talks
39mOn Establish a Production Zero Trust Architecture
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
45mZero Trust: Getting to Step One..and What to Do When You Get There
40mZero Trust and Privacy: Moving Security Closer to the Target
02h 48mZero Trust: the new normal!
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security
18mImplementing Zero Trust at Enterprise Scale
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos