The Rise of Zero Trust Architecture: Evaluating Organizational Readiness, Implementation Challenges, and Post-Deployment Effectiveness

References

[1] Center for Internet Security (CIS). (2021). CIS Controls v8.

[2] NIST. (2018). Framework for improving critical infrastructure cybersecurity (Version 1.1). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.CSWP.19

[3] Cloud Security Alliance (CSA). (2013). Software defined perimeter (SDP): Protecting applications in the cloud.

[4] CISA. (2021). Zero trust maturity model. Cybersecurity and Infrastructure Security Agency.

[5] Ferraiolo, D. F., & Kuhn, D. R. (2004). Role-based access controls. Proceedings of the 15th National Computer Security Conference, 554–563.

[6] Gartner. (2019). Market guide for user entity behavior analytics. Gartner Research Report G00745231.

[7] National Institute of Standards and Technology (NIST). (2017). Digital identity guidelines: Authentication and lifecycle management (SP 800-63B).

[8] National Institute of Standards and Technology (NIST). (2020). Attribute-based access control (ABAC) overview (NIST IR 8286).

[9] DHS CISA. (2021). Advanced persistent threat compromise of government agencies, critical infrastructure, and private sector organizations. Cybersecurity and Infrastructure Security Agency.

[10] Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero trust architecture. https://doi.org/10.6028/nist.sp.800-207

[11] IBM. (2023). Cost of a data breach report 2023. IBM Security. https://www.ibm.com/reports/data-breach

[12] Kindervag, J. (2010). Build security into your network’s DNA: The zero trust network architecture. Forrester Research.

[13] Mell, P., & Grance, T. (2011). The NIST definition of cloud computing (Special Publication 800-145). National Institute of Standards and Technology.

[14] NIST. (2023). Cloud computing standards roadmap (NIST SP 500-291). National Institute of Standards and Technology.

[15] The White House. (2021). Executive order on improving the nation's cybersecurity.

[16] Verizon. (2023). Data breach investigations report (DBIR) 2023. Verizon Business.

[17] DoD. (2022). Department of Defense Zero Trust Strategy. U.S. Department of Defense. https://dod.defense.gov/News/Defense-Department-Releases-Zero-Trust-Strategy/

[18] NIST. (2020). Digital identity guidelines: Authentication and lifecycle management (SP 800-63B). National Institute of Standards and Technology.https://doi.org/10.6028/NIST.SP.800-63b

[19] NIST. (2022). Status report on the third round of the NIST Post-Quantum Cryptography standardization process (NIST IR 8413). National Institute of Standards and Technology.

[20] Department of Defense (DoD). (2021). Cybersecurity Maturity Model Certification (CMMC) version 2.0.

[21] European Commission. (2018). General Data Protection Regulation (GDPR). Official Journal of the European Union, L119, 1–88.

[22] Gartner. (2023). Market guide for Zero Trust network access (ZTNA). Gartner Research Report

[23] ISO/IEC. (2022). ISO/IEC 27701:2019 — Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management. International Organization for Standardization.

[24] Arun Dhanaraj. (09/27/2023) Putting Zero Trust Architecture into Financial Institutions. http://cloudsecurityalliance.org/blog/2023/09/27/putting-zero-trust-architecture-into-financial-institutions

[25] Usama Amin (November 21, 2022). Avoidable Mistakes in Implementing Zero Trust Security2023https://cybersnowden.com/mistakes-in-implementing-zero-trust-security/

[26] Toph Whitmore (Sep 19, 2022) The Elusive Promise of (and Maddening Obstacles to Implementing) a Cloud Zero Trust Architecture. https://www.frost.com/growth-opportunity-news/elusive-promise-and-obstacles-to-cloud-zero-trust-architecture/

@article{1709863,
      author = {Tim Abdiukov},
      title = {The Rise of Zero Trust Architecture: Evaluating Organizational Readiness, Implementation Challenges, and Post-Deployment Effectiveness},
      journal = {Iconic Research And Engineering Journals},
      year = {2024},
      volume = {7},
      number = {7},
      pages = {715-725},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1709863.pdf},
      abstract = {The lack of practicality of the traditional perimeter-based models has led to the rise of Zero Trust Architecture (ZTA), which has emerged as a critical paradigm of cybersecurity. ZTA operates on the principle of 'never trust, always verify' to safeguard the current digital environment. The company focuses on continuous authentication, least privilege access, and micro-segmentation. In this article, the author assesses organizational preparedness for the adoption of ZTA, the contentious issues of implementation, including legacy system integration and cultural resistance, and evaluates the effectiveness of its implementation in reducing breaches and improving skills to respond to incidents following rollout. It also examines the trends that are about to be displayed, such as the integration of AI and the adaptation of IoT, which makes ZTA a moving target and an evolving method of cybersecurity resilience.},
      keywords = {Zero Trust Architecture (ZTA), Cybersecurity, Continuous Authentication, Least Privilege Access, Micro-Segmentation},
      month = {January},
  }