Rodney Nash

Cybersecurity architect and engineer. Perimeter security is my first love, but all information security are a part of my life.

[Rodney Nash @agamsnow]

My first tweet chat, and I was lucky enough to have the participation of some great experts in the field. Big thanks to @BillMew @DrJDrooghaag @YuHelenYu @jwgoerlich @Bearxor @sanjaykatkar @sarbjeetjohal #STinsights

[Rodney Nash @agamsnow]

@sarbjeetjohal I think the resistance to policy change is key which will be a culture change. Organizational culture change about as quick as ship at sea. @CIOStraightTalk #STinsights

[Rodney Nash @agamsnow]

@BillMew @CIOStraightTalk I believe where Zero Trust is the framework, SASE is part of the solution. @CIOStraightTalk #STinsights

[Rodney Nash @agamsnow]

Q5: One solution, Zero Trust everything. At what cost? Can an organization afford to simply say, “Zero Trust Everything”? Typically, this is not realistic especially if microsegmentation is a Zero Trust goal of an organization. @CIOStraightTalk @STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Keep shooting YOUR questions using #STinsights. Here’s our final formal question to the panel. #Tweetchat
What are the key challenges of implementing #ZeroTrust within an enterprise’s existing SASE architecture?

[Rodney Nash @agamsnow]

Q5: The major challenge is classifying what is there. Organizations simply don’t know what is important or where the important data and systems actually exist. Classification is a daunting task. Who owns it? Where is it? And how important is it? @CIOStraightTalk @STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Keep shooting YOUR questions using #STinsights. Here’s our final formal question to the panel. #Tweetchat
What are the key challenges of implementing #ZeroTrust within an enterprise’s existing SASE architecture?

[Dr. ir Johannes Drooghaag (JD) #BYOC! 🕊 @DrJDrooghaag]

📌 Q4 - Identity and Access Management, just like Asset Management, are key to any Zero Trust integration.

Zero Trust without these key elements is akin to rearranging the deck furniture on the Titanic!

@CIOStraightTalk #STinsights #ZeroTrust #CyberSecurity

[Rodney Nash @agamsnow]

Q4: IAM must take into account MFA, but also verification based on behavioral analysis. It must secure systems as well as data and applications. My opinion, IAM must be at the forefront of any Zero Trust implementation. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

A big shoutout to everyone on our panel. Join the conversation using #STinsights. Here’s our fourth question. #Tweetchat
What is the significance of identity and access management in a #Zero Trust integration?

[Rodney Nash @agamsnow]

Q4: Reduce user access. It is not uncommon for a user to have access beyond their role as well as root/admin access to their own system. Automate user onboarding/offboarding and use strict RBAC with IAM and control privilege access with PAM. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

A big shoutout to everyone on our panel. Join the conversation using #STinsights. Here’s our fourth question. #Tweetchat
What is the significance of identity and access management in a #Zero Trust integration?

[Rodney Nash @agamsnow]

Q4: IAM is integral for ZT as the verify everything piece of the puzzle. It must be able to do continuous verification while being non-intrusive to the user. It must understand the user and not rely strictly on MFA. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

A big shoutout to everyone on our panel. Join the conversation using #STinsights. Here’s our fourth question. #Tweetchat
What is the significance of identity and access management in a #Zero Trust integration?

[Rodney Nash @agamsnow]

@Bearxor @sarbjeetjohal MFA and IAM must be as non-intrusive as possible. More noise from the user, the harder it will be for adoption. #STinsights

[Rodney Nash @agamsnow]

Q3: Verify everything and automate response. Instead of being reactive, prepare to be proactive. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Time for our third question. Join the conversation using #STinsights. Keep the questions coming! #Tweetchat  
What are the best practices that enterprises should follow while integrating #ZeroTrust with their existing security architecture?

[Rodney Nash @agamsnow]

Q3: Segmentation, keep the critical data and infrastructure segmented from the non-critical. Shrink the attack surface. If they can’t see it, they can’t attack it. @CIOStaightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Time for our third question. Join the conversation using #STinsights. Keep the questions coming! #Tweetchat  
What are the best practices that enterprises should follow while integrating #ZeroTrust with their existing security architecture?

[Rodney Nash @agamsnow]

Q3: Business objectives must be a part of the zero trust framework. Business buy-in is important. Security will go before business stops. Most of us look at Zero Trust as an IT framework, but it isn’t. Zero Trust starts with the business. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Time for our third question. Join the conversation using #STinsights. Keep the questions coming! #Tweetchat  
What are the best practices that enterprises should follow while integrating #ZeroTrust with their existing security architecture?

[Rodney Nash @agamsnow]

@Bearxor @YuHelenYu @sanjaykatkar @CIOStraightTalk @BillMew @DrJDrooghaag @sarbjeetjohal @NeilCattermull @jwgoerlich In my years of information security, it is funny how security professionals were chastised for lack of trust, but now it has come full circle. @CIOStraightTalk @STinsights

[Rodney Nash @agamsnow]

Q2 2/2: Another trend, how to apply ZT to the cloud & cloud infrastructure? A question that I am
hearing all the time. This is a harder question to answer because most cloud environments were
established by developers without system architects. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Join the conversation using #STinsights. Here’s our second question. #Tweetchat

[Rodney Nash @agamsnow]

Q2 1/2: Security Service Edge (SSE) Broker Gateways: the WFH movement, due to the pandemic,
started to question how do we allow people to access internal resources securely while being
people friendly. A move away from common VPNs. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

Join the conversation using #STinsights. Here’s our second question. #Tweetchat

[Rodney Nash @agamsnow]

@jwgoerlich @CIOStraightTalk Agreed here, for me, it is a transformational journey. It is a culture change which will take time and maturation.

[Rodney Nash @agamsnow]

The "where" is more challenging. First, do an assessment. It is impossible to start a journey if you don't know the starting point. Know what you have (data, applications, systems, people) and where they reside. Remember, ZT is a journey. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

We are going live with the #Tweetchat. Join using #STinsights.

[Rodney Nash @agamsnow]

The "when" is simple. NOW. Really there is no other answer to this question. Zero Trust is what information security teams have always wanted to do but never had the framework for business buy-in. @CIOStraightTalk #STinsights

[HCLTech Trends and Insights @HCLTechInsights]

We are going live with the #Tweetchat. Join using #STinsights.

[HCLTech Trends and Insights @HCLTechInsights]

Follow #STinsights to join a Twitter discussion with leaders on “Adopting a tailored #zerotrust approach for enterprises.” Tune in at 11 a.m. ET today at https://t.co/Xbo5NaTJzd to join the discussion. #Tweetchat