NSA Issues Zero Trust Guidelines for Network Security

By ADMIN Team

The document aims to improve security through Zero Trust principles.

The National Security Agency (NSA) has released a Cybersecurity Information Sheet (CSI) with recommendations for strengthening internal network control and containing network intrusions using Zero Trust principles.

The Advancing Zero Trust Maturity Throughout the Network and Environment Pillar document aims “to arm network owners and operators with the processes they need to vigilantly resist, detect, and respond to threats that exploit weaknesses or gaps in their enterprise architecture,”

says NSA Cybersecurity Director Rob Joyce.

The concepts covered in the document “provide guidance on enhancing existing network security controls to limit the potential impact of a compromise through data flow mapping, macro and micro segmentation, and software-defined networking.”

Related content

Zero Trust as a security strategy
Acceptance of zero trust models like BeyondCorp by Google or LISA by Netflix lags in Europe, where endpoint security is king. We examine why this situation must change by looking into the principles of modern zero trust concepts.

more »
Microsoft Offers New Cybersecurity Architect Expert Certification

more »
Azure AD with Conditional Access
Trust is good, but controls are better. As more flexible working models become widespread, the boundaries of the classic perimeter are blurring and softening existing models of trust for adopting cloud software and data storage or running domain controllers or core applications in the cloud.

more »
Secure SSH connections the right way
Admins use SSH, the proverbial Swiss army knife of system management, for many of their daily tasks, but no matter how powerful the tool might be, it typically does not offer adequate protection. We look at ways to tighten SSH security.

more »
Understanding Cybersecurity Maturity Model Certification
United States Cybersecurity Maturity Model Certification will be required by mid-2023 to handle controlled unclassified information and win federal contracts, but it can also help minimize business risk and keep information out of the hands of adversaries.

more »