\u201cTrust no one, Jim. Especially not in the mainstream;\u201d said Mr. \u2018Control\u2019 to Jim in an opening scene of John Le Carre\u2019s ever so popular 1974 British fiction spy novel: Tinker Tailor Soldier Spy.<\/p>\n
Jim was a part of the British Intelligence Services, code-named \u2018Circus\u2019, sent by \u2018Control\u2019- head of the \u2018Circus\u2019, on a mission to erstwhile Czechoslovakia, but got killed due to botched operations thanks to a Soviet mole inside the \u2018Circus\u2019, who passed all the information of the \u2018Circus\u2019 during the heydays of the Cold War.<\/p>\n
Abusing Trust is the most deceptive weapon of the enemies within.
\nOblivious to the fact that someone entrusted with an important task could actually work against their interests, organizations, governments and even intelligence agencies have fallen prey to compromised insiders over the years.<\/p>\n
And oddly enough, the \u2018trusted\u2019 within the organizational realm still finds it easy to manoeuvre. Or else, how could one explain the rising incidents of cyber espionage, data breach, credentials abuse among many other instances where the \u2018trust\u2019 is compromised?<\/p>\n
Insider threat is not a new phenomenon. Insiders, from the time immemorial, have proved to be the nemesis, overthrowing kingdoms and empires. That potential to cause colossal damage, however, has only been magnified in the digital age. An insider can abuse the \u2018trusted entitlements\u2019 to access the confidential information.<\/p>\n
Equally damaging is the fact those modern-day organizations have large IT environments. And that \u2018trusted\u2019 member with a potential to abuse the \u2018trust\u2019 can be anywhere\u2026 At home, on-premises, at the client\u2019s site, on-cloud, inside a cafe\u2026 The list is big enough for the malefactors to exploit.<\/p>\n
\u2018Close all the gates to the IT kingdom so that the network traffic is inspected and threats kept at bay\u2019 is no more valid today. Most of the IT incidents emanate from loopholes that can be regarded as blind spots<\/a>: Unprotected and unmonitored digital identities.<\/p>\n The trusted insiders, privy to confidential information, abuse those \u2018trusted digital identities\u2019 to lay hands on that sensitive piece of information. Essentially, the framework enables security and risk management teams to constantly assess the trust by means of multi-factor authentication (MFA) tools, Application streaming technologies to restrict systems exposure, Software-defined Perimeter (SDP), network encryption and continuous risk-based assessment of digital identities using AI\/ML.<\/p>\n So, what it means is even if that \u2018trusted identity\u2019 is a privileged identity, it would be assessed, validated and audited, continuously. It is that unverified \u2018trust\u2019 that often leads to colossal IT damage. Implement the Zero Trust framework to avoid the misuse of \u2018trust\u2019.<\/p>\n","protected":false},"excerpt":{"rendered":" \u201cTrust no one, Jim. Especially not in the mainstream;\u201d said Mr. \u2018Control\u2019 to Jim in an opening scene of John Le Carre\u2019s ever so popular 1974 British fiction spy novel: Tinker Tailor Soldier Spy. Jim was a part of the British Intelligence Services, code-named \u2018Circus\u2019, sent by \u2018Control\u2019- head of the \u2018Circus\u2019, on a mission […]<\/p>\n","protected":false},"author":40,"featured_media":47571,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-46798","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":47571,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"Overview","item_name":"Overview"},{"id":"Trust and Insider Threats","item_name":"Trust and Insider Threats"},{"id":"\u00a0Trust, IT Loopholes and the Zero Trust Framework","item_name":"\u00a0Trust, IT Loopholes and the Zero Trust Framework"},{"id":"The bottom-line","item_name":"The bottom-line"}],"contents":[{"id":"Overview","title":"Overview","content":"\u201cTrust no one, Jim. Especially not in the mainstream;\u201d said Mr. \u2018Control\u2019 to Jim in an opening scene of John Le Carre\u2019s ever so popular 1974 British fiction spy novel: Tinker Tailor Soldier Spy.\r\n\r\nJim was a part of the British Intelligence Services, code-named \u2018Circus\u2019, sent by \u2018Control\u2019- head of the \u2018Circus\u2019, on a mission to erstwhile Czechoslovakia, but got killed due to botched operations thanks to a Soviet mole inside the \u2018Circus\u2019, who passed all the information of the \u2018Circus\u2019 during the heydays of the Cold War.\r\n\r\nAbusing Trust is the most deceptive weapon of the enemies within.\r\nOblivious to the fact that someone entrusted with an important task could actually work against their interests, organizations, governments and even intelligence agencies have fallen prey to compromised insiders over the years.\r\n\r\nAnd oddly enough, the \u2018trusted\u2019 within the organizational realm still finds it easy to manoeuvre. Or else, how could one explain the rising incidents of cyber espionage, data breach, credentials abuse among many other instances where the \u2018trust\u2019 is compromised?"},{"id":"Trust and Insider Threats","title":"Trust and Insider Threats","content":"Insider threat is not a new phenomenon. Insiders, from the time immemorial, have proved to be the nemesis, overthrowing kingdoms and empires. That potential to cause colossal damage, however, has only been magnified in the digital age. An insider can abuse the \u2018trusted entitlements\u2019 to access the confidential information.\r\n\r\nEqually damaging is the fact those modern-day organizations have large IT environments. And that \u2018trusted\u2019 member with a potential to abuse the \u2018trust\u2019 can be anywhere\u2026 At home, on-premises, at the client\u2019s site, on-cloud, inside a cafe\u2026 The list is big enough for the malefactors to exploit."},{"id":"\u00a0Trust, IT Loopholes and the Zero Trust Framework","title":"\u00a0Trust, IT Loopholes and the Zero Trust Framework","content":"\u2018Close all the gates to the IT kingdom so that the network traffic is inspected and threats kept at bay\u2019 is no more valid today. Most of the IT incidents emanate from loopholes that can be regarded as blind spots<\/a>: Unprotected and unmonitored digital identities.\r\n\r\nThe trusted insiders, privy to confidential information, abuse those \u2018trusted digital identities\u2019 to lay hands on that sensitive piece of information.\r\nThe Zero-trust framework is a foundational IT concept that propagates never assume \u2018trust\u2019 but always verify the \u2018trust\u2019.\u00a0 Before letting anyone inside the IT kingdom, the Zero Trust security framework ensures that the trust is substantiated and authenticated.\r\n\r\nEssentially, the framework enables security and risk management teams to constantly assess the trust by means of multi-factor authentication (MFA) tools, Application streaming technologies to restrict systems exposure, Software-defined Perimeter (SDP), network encryption and continuous risk-based assessment of digital identities using AI\/ML.\r\n\r\nSo, what it means is even if that \u2018trusted identity\u2019 is a privileged identity, it would be assessed, validated and audited, continuously.\r\nPlease download one of our most popular whitepapers: \u201cZero Trust Privileged Access Security redefined with ARCON | PAM<\/a>\u201d. This whitepaper discusses in d"},{"id":"The bottom-line","title":"The bottom-line","content":"It is that unverified \u2018trust\u2019 that often leads to colossal IT damage. Implement the Zero Trust framework to avoid the misuse of \u2018trust\u2019."}],"form_shortcode":"","choose_asset_type":"files","links":"","files":"","pardot_redirect_url":"","video_link":""}]},"yoast_head":"\n
\nThe Zero-trust framework is a foundational IT concept that propagates never assume \u2018trust\u2019 but always verify the \u2018trust\u2019.\u00a0 Before letting anyone inside the IT kingdom, the Zero Trust security framework ensures that the trust is substantiated and authenticated.<\/p>\n
\nPlease download one of our most popular whitepapers: \u201cZero Trust Privileged Access Security redefined with ARCON | PAM<\/a>\u201d. This whitepaper discusses in detail how ARCON Privileged Access Management solution helps to build the Zero Trust framework.<\/p>\nThe bottom-line<\/h3>\n