The emergence of the term Zero Trust in recent years within the information security discipline has revealed a new trend aimed at trimming down static defense perimeters and central security models. As this thesis explicates, the Dual-Perspective Assessment Model is very helpful in assessing Zero Trust Maturity for organizations, offering technical and functional aspects together. The model develops an assessment tool that measures the current infrastructure and includes a plan for migration to a Zero Trust Architecture (ZTA). Based on a comprehensive literature review, the study uses both qualitative and quantitative techniques to determine key factors influencing ZTA implementation, addressing the need to incorporate technology and a firm’s strategic objectives for higher security. Through this model, organizations implementing or reinforcing the Zero Trust tendency, as well as companies occupying the field of cybersecurity management work, have a practical tool for strategy and tendency.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Zero Trust Maturity Dual Assessment Model: Incorporating Technical and Organizational Insights

  • Yu-Chih Wei,
  • Tak Wai Yu,
  • Wei-Chen Wu

摘要

The emergence of the term Zero Trust in recent years within the information security discipline has revealed a new trend aimed at trimming down static defense perimeters and central security models. As this thesis explicates, the Dual-Perspective Assessment Model is very helpful in assessing Zero Trust Maturity for organizations, offering technical and functional aspects together. The model develops an assessment tool that measures the current infrastructure and includes a plan for migration to a Zero Trust Architecture (ZTA). Based on a comprehensive literature review, the study uses both qualitative and quantitative techniques to determine key factors influencing ZTA implementation, addressing the need to incorporate technology and a firm’s strategic objectives for higher security. Through this model, organizations implementing or reinforcing the Zero Trust tendency, as well as companies occupying the field of cybersecurity management work, have a practical tool for strategy and tendency.