OK, so here’s a quick recap of our mission from yesterday’s email. We want to give security buyers a plan (clinks beer glasses with Donald Miller) for Zero Trust Architecture.

What building blocks do we have to start with?

Here are three possible starting points that I think could be interesting to explore. I’m going to do a deeper dive on each, but here’s what I’m thinking:

Option 1: “A Practical Guide to Zero Trust Implementation” by Forrester Research

Forrester coined the term Zero Trust Architecture and drove much of the early vision and discussion around it. Maybe we just need to guide buyers to Forrester’s recommendations and do a great job explaining where and when specific security vendors fit in?

Option 2: “The Spectra Alliance”​

Crowdstrike, Netskope, Okta, and Proofpoint have already banded together to create something that resembles what I’m describing. (And gave it a name with great Bond villain vibes.) Maybe we’re done? Maybe this just needs to expand and evolve?

Option 3: “NIST Special Publication 800-207”​

Let’s not sleep on this one even though it has Wilbur Ross’ name on it. While old Wilbur was beating up on NOAA, the good folks at NIST were hiding away doing NISTy stuff on Zero Trust. Maybe it’s a framework we can build on?

I’ll start with these, but can you think of any others? If so, shoot me a quick reply.

-Doug

OK, so here’s a quick recap of our mission from yesterday’s email. We want to give security buyers a plan (clinks beer glasses with Donald Miller) for Zero Trust Architecture.

What building blocks do we have to start with?

Here are three possible starting points that I think could be interesting to explore. I’m going to do a deeper dive on each, but here’s what I’m thinking:

Option 1: “A Practical Guide to Zero Trust Implementation” by Forrester Research

Forrester coined the term Zero Trust Architecture and drove much of the early vision and discussion around it. Maybe we just need to guide buyers to Forrester’s recommendations and do a great job explaining where and when specific security vendors fit in?

Option 2: “The Spectra Alliance”​

Crowdstrike, Netskope, Okta, and Proofpoint have already banded together to create something that resembles what I’m describing. (And gave it a name with great Bond villain vibes.) Maybe we’re done? Maybe this just needs to expand and evolve?

Option 3: “NIST Special Publication 800-207”​

Let’s not sleep on this one even though it has Wilbur Ross’ name on it. While old Wilbur was beating up on NOAA, the good folks at NIST were hiding away doing NISTy stuff on Zero Trust. Maybe it’s a framework we can build on?

I’ll start with these, but can you think of any others? If so, shoot me a quick reply.

-Doug