Implementing Zero Trust in an organisation - Uncertainty Ready

Submitted Apr 9, 2020

Duration of the session:: 40 mins full talk Category of talk: Security

The Current unprecedented situation has changed the IT World forever, no matter what the outcome is, the conceptual changes in the working styles of people are here to stay. The world will never get back to the plane jane everything works only on this building for most of the work environment.

Currently most of the firms have scrambled to enable the workforce to work from home with a certain level of security. This is a band aid fix at best in current time, However the concept of zero trust has been present for ages and is the right kind of solution we need for such situations.

The talk will focus on the concept and demystification of zero trust models at the time of uncertainty. We should focus on implementation and deployment scenarios of zero trust for organizations. How should the business prepare for the transition, what are the architectural requirements and what policies are required to be implemented. We will also accentuate the Security team’s responsibilities which will be substantiated by use cases with respect to the same.

Outline

Everyone wants to be in the new cool thing called cloud, but what about security and compliance standards? How do organizations manage safety as well as security in the era of cloud or the uncertainty? The concept of anyone inside the network being good or trusted is blown out of the water with cloud deployments. Now, When everyone is working from home and remote how to make sure the data is secure.

The talk will focus on the concept and demystification of zero trust models at the time of uncertainty.
Where to start from?
Implementation and deployment scenarios of zero trust for organizations
How should the business prepare for the transition
What are the architectural requirements and what policies are required to be implemented

The real impact and people benefit of Implementing Zero Trust Model

Concluding with:-
Recommendations on what organisations can do to bring the change
Things that worked and things that did not work
Future Roadmap

Speaker bio

Vandana is a seasoned security professional with over 14 years of experience ranging from application security to infrastructure and now dealing with DevSecOps.

She works with various communities (InfoSecGirls, OWASP, WoSec and null) and is passionate about increasing female participation in Infosec space. She has trained over 3000 Diversity Participants around the globe on information Security.

She was a keynote speaker at OWASP Global AppSec DC, 2019. She has spoken and trained at various conferences AppSec Europe, AppSec USA, NullCon, Security Guild 2019, BSides Delhi, c0c0n (Kerala Police Conference), Global AppSec Tel Aviv and Blackhat US 2019. She is part of the crew for OWASP Seasides and BSides Delhi conferences. She has been on the CFP Review Committe for AppSec Europe, Global AppSec Tel Aviv, Global AppSec DC, BSides Delft, BSides Ahmedabad and Grace Hopper US 2019 (Security/Privacy Review Track).

She has received Global cybersecurity influencer among IFSEC Global’s “Top Influencers in Security and Fire” Category for 2019. She recently received Cybersecurity Women of the year award by Women Cyberjutsu Society in the Category “Secure Coder”. She has also been listed as one of the top women leaders in this field of technology and cybersecurity in India by Instasafe.

Rootconf Sessions