Deloitte launches new zero-trust managed access service

We're excited to bring Transform 2022 back in person on July 19 and virtually from July 20-28. Join leaders in AI and data for in-depth discussions and exciting networking opportunities. Sign up today!

Being able to tell a legitimate user from a threat actor is a capability that every security team should have. Today, there are simply too many malicious threats to trust on first use and assume that a user or device connecting to the network has good intentions.

Modern security teams must have a comprehensive zero-trust strategy based on the assumption that every device or user that logs in is malicious until proven guilty.

The problem is that few organizations have the expertise to create a technology ecosystem that can verify and authenticate users each time they access a protected resource.

In fact, research shows that while many organizations have fully implemented or are trying to implement a zero-trust strategy, more than half (59%) lack the ability to authenticate users. and devices continuously.

Event

Transform 2022

Join us at the leading Applied AI event for enterprise business and technology decision makers on July 19 and virtually July 20-28.

register here Making Zero Trust Accessible

In an attempt to lower the barrier to zero trust network access, Deloitte today announced the launch of Zero Trust Access, a new zero trust access managed security service that security teams may use to secure communications between users, devices and applications.

Zero Trust Access will provide decentralized peer-to-peer (P2P) connectivity between end users and applications, so that sensitive data traffic does not pass through any point-of-presence (POP) device managed by a third party .

This not only helps prevent man-in-the-middle attacks, but also reduces an organization's overall exposure to third-party risk. The service also offers continuous authorization, application segmentation and attack surface management.

Implement Zero Trust

In the networking world, implicit trust is a dangerous thing. Giving a malicious actor the benefit of the doubt can result in a massive data breach that costs tens of thousands (or even millions) of dollars to fix.

For organizations trying to navigate today's threat landscape, the continued application of zero trust is a must.

"Legacy approaches to remote access to corporate resources typically depended on routing network traffic through corporate data centers and having additional controls in place to detect and prevent breaches. threats," said Andrew Rafla, Head and Principal of Deloitte Risk and Financial Advisory's Zero Trust Offering. .

“However, these legacy approaches and technologies often grant implicit trust to the entire enterprise upon successful authentication, which can increase the risk of lateral movement threats and violate the fundamental principle of zero trust. "Never trust, always verify...