NSA Issues Zero Trust Guidance on Automation and Orchestration
The US National Security Agency (NSA) has issued guidance on “Advancing Zero Trust Maturity Throughout the Automation and Orchestration Pillar”, which represents the final pillar of the Department of Defense’s zero trust framework.
The latest cybersecurity information sheet highlights the following three areas where automation and orchestration should be put to use:
- To address repetitive, labor-intensive, and predictable tasks for critical functions and access control
- To enhance critical functions
- To coordinate security operations and incident response
The six other zero trust framework pillars are:
- The user pillar
- The devices pillar
- The network and environment pillar
- The data pillar
- The application and workload pillar
- The visibility and analytics pillar
According to the announcement, this document also offers “recommendations for automating routine tasks to better focus resources on investigating anomalies associated with advanced tactics, techniques, and procedures.”
Read more at the NSA.
07/30/2024
Related content
- NSA Issues Zero Trust Guidelines for Network Security
-
Tech News
In the news: Open Source AGPL Added as License Option for Elasticsearch; Sovereign Tech Fund Invests in FreeBSD Development; Red Hat's OpenStack Services on OpenShift Now Generally Available; Juniper Networks Offers New AI-Native Courses and Services; Delphix Report Cites Growing Concerns Over Data Protection; Endor Labs Launches Magic Patches and Upgrade Analysis Tool; Rackspace to Offer TuxCare's Extended Linux System Support; Announcing eLxr: Enterprise-Grade Linux for Edge-to-Cloud Deployments; NSA Issues Zero Trust Guidance on Automation and Orchestration; and IT Pros Report Lack of Familiarity with Secure Software Development.
-
News for Admins
In the news: DHS Releases New Guidelines for Securing Critical Infrastructure; Datadog Report Examines DevSecOps Best Practices; Upskilling Key to Tech Staffing Challenges, Says LF Survey; 2024 Open Source Pros Job Survey Report Released; OpenSSF Issues Guidance to Help Prevent Social Engineering Attacks; Black Duck Supply Chain Edition Released by Synopsys; Spectra Logic Announces New Tape Libraries and Management Software; LPI Launches Open Source Essentials Program; Apache Software Foundation Celebrates 25 Years; SUSE Announces Rancher Prime 3.0; NSA Issues Zero Trust Guidelines for Network Security; and NIST Releases Major New Version of Cybersecurity Framework.
-
Zero trust planning and implementation
The many facets of the zero trust implementation process can be a source of frustration, which is why we offer a step-by-step guide to implementing zero trust models to help you make state-of-the-art IT security become a reality. -
IT automation with SaltStack
SaltStack is a fast and reliable modular toolbox written in Python that contains ready-made modules for many configuration management purposes.