DeVry Online IEEE, AWS Zero Trust Architecture –NIST 800-207

Abstract: NIST Special Publication 800-207 provides guidance on the concept and implementation of Zero Trust Architecture (ZTA) in cybersecurity. It emphasizes the shift from traditional network security models to a model where trust is never assumed, regardless of location. The document outlines principles such as continuous verification, strict access controls, and risk-based decision-making. NIST 800-207 advocates for the continuous monitoring of systems and user activities, enabling the prompt identification of anomalies and potential security threats. The framework stresses the importance of identity management, ensuring that entities are authenticated and authorized based on their roles and attributes. Risk-based controls are integrated into the architecture, aligning security measures with identified risks to maintain a balanced and adaptive security posture. The publication recognizes the dynamic nature of modern IT environments, urging organizations to implement Zero Trust principles as a proactive and evolving approach to cybersecurity. Speaker’s Bio: Mr. John Hightower has over three decades of experience in the realm of Information Technology, specializing in cybersecurity for more than a decade. Armed with a Bachelor’s degree in Computer Science and an MBA. Mr. Hightower brings a wealth of knowledge and expertise, with a decade-long tenure at the Department of Defense and another substantial stint at the large state government level. He possess a unique perspective on the intersection of technology and governance. Currently serving as a Cyber Security Governance, Risk, and Compliance (GRC) architect, Mr. Hightower is at the forefront of shaping and securing digital landscapes. Speaker(s): John Hightower, Virtual: https://events.vtools.ieee.org/m/390271