The CISO Guide to Zero Trust Security

The Zero Trust Security framework provides essential security controls to remediate and mitigate advanced cyber threats from compromising our applications and systems.

The leaders of our nation, and the business and technology leaders of our firms have put in a call to arms for CISOs and other security professionals to lead this effort to secure our systems and applications from cyber-attackers. I have answered their call by writing this book.

This book provides guidance on implementing Zero Trust based security controls augmented with least privileged access and continuous authentication paradigms, essential to organizational information security for the traditional security domains such as network, data, device, application, identity, email, user and cloud, as well as the newer domains of API, AI, IoT and third-party systems (like SaaS).