Why Implement Zero Trust

See current threats: ibm.biz/BdP3Qh
Learn about IBM zero trust security solutions: ibm.biz/BdP3QV
Moving to a hybrid, multicloud infrastructure means your resources are also likely scattered throughout multiple IT environments with varying levels of visibility and control. It’s difficult to know if the right user has the right access to the right data. You need context to help you make the right decisions. Distinguished Engineer, Jeff Crume explains how "the bad guy" may already be in your house - as an analogy, comparing it to your business.
Download a free AI ebook: ibm.biz/Trust_...
Get started for free on IBM Cloud: ibm.biz/Zero_T...
Subscribe to see more videos like this in the future → ibm.biz/subscri...
#AI #Software #ITModernization #ZeroTrust #lightboard #IBM

[@amjads8971]

IBM knows how to creating videos explaining complex topics in a very simple and precise manner

[@davidkayembe5262]

Just incredible

[@timeglass777]

It is a good analogy of ZTA but its concepts are much broader. ID verification, Access control, Monitoring and Analysis are just few of the key principles.

[@johnwade1325]

This is a nice presentation. Thank you. Another way I like to put it is this, "The role of security is to let the right people in, not to keep the wrong people out". Looked at it this way, zero trust doesn't look so draconian. This doesn't sit well with the house analogy, but does with real commercial computer systems (sadly, there have been cases throughout the history of IT where systems have been abused from the inside as well as from the outside). The point about granting people only the rights they need is well made - though you do need facilities and procedures to give temporary access when a critical worker on a system is suddenly unavailable: someone has to have the authority to grant temporary access - and then take it away as soon as the usual person returns. The point about "risk assessment" is also well made. You want everyone to come to your website and browse freely if you are selling something - but you want a solid guarantee of identity if they have a purchasing account with you: so different parts of your application may well have very different levels of security from total trust to zero trust, Granularity is key, and must be designed into the application from the outset. Good Code is Not Enough!

[@jeffcrume]

Well said, John!

[@surenderarora1899]

Great analogy of House to simplify the understanding - How to secure IT infra at Zero Trust Level. Nicely Explained - Never Trust Always Verify. Thanks a lot Jeff!

[@jeffcrume]

Thanks for taking the time to provide encouraging feedback! I’m glad you enjoyed it!

[@louiseabigailpayuyo5120]

Excellent explanation! Very easy to understand. Thanks and hope you produce more of this type of content.

[@erikslorenz]

These vids rock. Whoever came up with the idea is the man

[@mirochnik2008]

Impressive overview of complicated subject made simple by best of the best - @Jeff Crume!

[@jeffcrume]

Very nice of you to say so!

[@macshort2645]

Jeff this was a great presentation !!!

[@oladimejimichaeloloyede7203]

I like the build-up scenario of the house security, is like holding a baby's hand from level 0 to a higher level of talking about the least privilege. Thank you.

[@alexpishvanov736]

Clear and genius explanation! As usual :)

[@dadoll1660]

Great analogy.

[@steveandreassend8620]

This is excellent!

[@alexxUKR]

Very short, but nicely packaged overview of zero trust concept. Thank you,

[@toenytv7946]

Well explained. Good comparisons.

[@jay2004r]

This was a great explanation and great video!!

[@jeffcrume]

Thanks for watching!

[@robpickles3736]

Awesome presentation! Thank you for sharing the knowledge.

[@jeffcrume]

Very kind of you to say!

[@theyield2521]

Brilliant stuff.

[@micheldupont636]

I think it lacks the explanation of “why zero trust is essential when you are using the public cloud ?” Many companies are still thinking of perimetrical security because they are used of the “on premise” world. In the public cloud, the attacks can arrive from any place, any component…

[@tzlwin]

Very informative and useful, thank you.

[@jeffcrume]

Glad you liked it!

[@gabicolaco3101]

It was very good, thanks for the explanation!

[@user-ty2yl4wp9z]

Thank you for the great information

[@jeffcrume]

Thank you for saying so!

[@karengomez3143]

“The things that I trust the most are the things that I have verified the most” Depending on risks, we are setting our point in the implicit-zero tolerance spectrum… how much we’re willing to risk and our risk tolerance.

[@davidkayembe5262]

I give you ⭐⭐⭐⭐⭐

[@davidearthos6453]

only things i can verify.. do i trust .. start from zero and rebuild..

[@brooklyndreadlocks8182]

What kind of board is that? I want one.

[@IBMTechnology]

Search on "lightboard videos"

[@jeffcrume]

kzbin.info/www/bejne/gpXRe6KKaq6Khq8

[@rajaganji7982]

What does DMZ mean?

[@dadoll1660]

demilitarized zone

[@amjads8971]

Distinguish engineer,what is this role. This topic is related to security engineer isn’t it ?

[@IBMTechnology]

Distinguish Engineer is an IBM title that recognizes technical achievement over a long period; it involves a formal nominations by peers and executives.

[@rickharold7884]

Fun

[@TantalG]

I don't trust this man.

[@jeffcrume]

Zero trust in action! 😂

[@xelerated]

Well considering he is from IBM, not trusting him is a good thing

[@RickLambert963]

How very 1984

[@sergiomartinez5946]

Lol saying pay per view in 2024.

[@michaelsloushch3950]

said nothing