Hello、munejyuka。

The other day、I was reading an article online、

zero trust security

The word appeared。

I understand security、I don't understand the meaning of zero trust。

So this time、I looked into the term zero trust security.。

What is Zero Trust?

The keyword “zero trust” is commonly used、

zero trust security

It seems that it is used as。

this is、

Considering the current situation where it is no longer possible to maintain security by ``protecting the boundaries based on the assumption that the inside of the company (inside the network) is safe.''、Assuming you don't trust all traffic、inspection、An approach to acquiring logs

That seems to be the case。

こう書くと難しそうですね。

簡略して書くと、

社内と社外の境界にセキュリティをかけておくだけではダメで、全ての通信アクセスにきちんとセキュリティをかけましょう

・ There is no speed limit due to crosswinds on the Sky Gate Bridge.。

外部からのアクセスが危険ですよ！社内は安全ですよ！！

This means that it is no good to think that way.。

Why should you adopt Zero Trust Security?

I use it normally when talking in conversation、Why is it now?、Do I have to implement zero trust security?

If anything、Wouldn't it be better to do this a long time ago? I get the idea that。

There、The current social situation has a major influence。

The big reason is、There are three possibilities:。

・Increase in telework

Under the influence of the new coronavirus、less commuting、More and more people are working from home。

Along with that、This means that it is becoming more common than ever to access the necessary data stored in the company.。

Regarding security when accessing、It's understandable that you're sensitive.。

・Increase in corporate use of cloud services

Not only do we store data on company servers;、cloud serviceSave the data you need for、I think there are some places that are practicing accessing that.。

It's so convenient that I end up using it easily.、Honestly, I think there are some concerns from a security perspective.。

・内部不正等による情報漏洩

あってはならないことですが、There is also a non-zero probability that someone inside the company will illegally obtain company information.。

If that happens、社内は安全だなんて言えません。

Where information that must not be leaked is stored、Must be properly secured。

Summary

・Zero trust security、As well as security for external and company access、Proper security for each communication device within the company

・Increase in telework and use of cloud services、For reasons such as preventing unauthorized access by people within the company.、I am attracting attention like never before.

Internet security is something you really need to be careful about.。

before major damage occurs、I hope to take proper measures!

*I found a book about zero trust security。I would like to read it once。