by Nathan Howe, VP Emerging Technologies, Zscaler
In a world where technologies, users and services need to communicate with each other seamlessly, the importance of the network as a security guardian is diminishing.
Whether it's communication between employees, telecommuting, workloads or IoT and edge devices… none of this depends on the network anymore.
However, everything must still be secured by a continuous process of validation and verification.
The challenges are ever-present for those working with outdated network and security architectures.
To guarantee secure connectivity in a modern IT world, it has indeed become necessary to question the management of these.
This is where Zero Trust comes in: an approach that assumes that no user or application is trusted by definition.
Access permissions are controlled using a cloud-based Zero Trust policy, ensuring that only authorized sources have the right to communicate with dedicated destinations.
But Zero Trust is much more than a security tool: it can be a real business catalyst in a landscape of digital transformation and a hybrid work environment.
However, many companies are still only halfway to discovering the full potential of the cloud and Zero Trust as a vector of business: this is what we want to change.
Much of the cloud's potential remains untapped
This year, we spoke with more than 1,900 senior IT leaders who have started their journey to the cloud.
We looked at the adoption patterns of zero trust cloud-based architectures, the current state of their implementation, and the barriers to updating their infrastructure to support the ongoing digital transformation and to come.
Documented in The State of Zero Trust Transformation 2023 report, the findings reveal enormous potential for change.
Only 22% of our respondents said they were completely confident about realizing the full potential of their cloud infrastructure.
A trend that varies according to geographical areas, with 14% in the EMEA region, against 24% in Asia and 42% in the Americas.
What stands out clearly is that there is a lot of room for improvement.
If, at first glance, security seems to be the main obstacle to true cloud use, the reasons for migrating to the cloud point to a deeper problem.
According to IT managers, privacy issues, cloud data security challenges, and scaling network security are the biggest barriers to realizing the full potential of the cloud.
In contrast, when asked about the most important drivers of digital transformation initiatives, respondents primarily cited cost reduction, support for new technologies (such as 5G and edge computing), and cyber risk management.
Traditional network security is no longer enough
Cloud concerns aside, leaders seem much more optimistic about the role Zero Trust plays in the organizational transformation process.
And training helps a lot.
Five years ago, if you talked about Zero Trust, the answer was often “What does it mean?
".
Today, this notion has evolved, and the vast majority of companies are considering the implementation of Zero Trust solutions.
In fact, we discovered that more than 90% of IT managers have, are in the process of, or plan to install a Zero Trust security architecture.
More than one in five companies have already implemented Zero Trust security, 39% are in the deployment phase and almost a third are still involved in strategic planning.
The fact that less than one in 10 organizations are not planning to implement Zero Trust, or are unaware of the terminology, underscores the importance organizations place on transforming their security.
This means that the question is no longer "What is it?"
but “What additional benefits can Zero Trust bring to my business?”
Traditional network security is no longer enough Zscaler
Zero Trust for Distributed Workplaces
To answer this question, we must first understand why companies implement the principle of Zero Trust.
Among the main priorities expressed in our study: To improve the detection of threats or attacks on web applications and the security of sensitive data
To secure remote access from vendors, partners, or operational technology (OT)
To secure the connectivity of hybrid employees
To reduce the cost and complexity of existing network security
At the same time, more than two-thirds (68%) of managers believe that secure cloud transformation is simply not possible given existing network security, or that Zero Trust Network Access (ZTNA) offers advantages over traditional firewalls and VPNs for remote application access.
These reasons explain why ZTNA ranks at the top of the investment priorities in Zero Trust technologies over the next 12 months.
However, there is still some catching up to do, especially when it comes to securing hybrid work environments.
Only 19% of IT managers worldwide already have an infrastructure based on the principle of Zero Trust for their hybrid workplace.
Almost three years after the start of the global pandemic, this therefore suggests that companies are not yet fully prepared to ensure the security of a highly distributed work environment.
However, they are still working on it: thus, in addition to those who have already updated their infrastructure, 50% of IT managers are in the process of implementing or planning a hybrid strategy based on the principle of Zero Trust.
This point is particularly important because, if a company does not allow its employees to work in a hybrid way, it risks losing them.
Retention in this regard is vital: companies need to be open to the idea of hybrid working and provide the technology to enable it, which Zero Trust helps to do.
As proof in recent years: user experience is essential to productivity in hybrid work environments.
In many companies with traditional network structures, however, employees face inconsistent access requirements for on-premises and cloud-based applications and data.
This is the main reason why more than half of companies (52%) are implementing or planning a hybrid work infrastructure based on the principle of Zero Trust.
Almost as many (46%) found that users suffered from lost productivity due to network access issues.
At the same time,
All of these factors contribute to employee dissatisfaction.
It is therefore reassuring to see the user experience cited as the main reason for adopting a hybrid work infrastructure based on the principle of Zero Trust.
Indeed, just over half of managers agree that its deployment would help eliminate disparate access experiences for on-premises and cloud-based applications and data.
These analyzes reflect the challenge, beyond security, that hybrid working poses in terms of access, user experience and performance.
Driving transformation
The survey results also highlighted a disconnect between management and IT leaders, as well as a misunderstanding of the reasons for digital transformation.
Specifically, they show that companies still see digital transformation as a matter of technology – a way to shift spending from internal infrastructure to the cloud – rather than an integral part of business strategy.
However, IT leaders involved in planning future business models understand that transformation cannot be limited to moving applications to the cloud.
For businesses to realize the full potential of digitalization,
As leaders of transformation, CIOs and CISOs have a key role to play in getting boards to choose Zero Trust.
Additionally, to reduce the cost and complexity of IT infrastructure, global digitalization initiatives are emerging, which will require focusing on the secure communication flows of emerging technologies around 5G, edge computing and cloud services.
According to 30% of managers, adequate security is considered the biggest challenge when implementing such innovative projects.
Zero Trust approaches address these challenges.
A need for continuous training
Despite the high implementation rates, there is a need to further explain the Zero Trust approach, which is to place no trust in anything or anyone from the outset.
It is indeed important to limit fears and uncertainties, but also to clarify how security based on Zero Trust can form the basis of further digitization.
The concept of Zero Trust will not only transform the way we do IT.
It will change the way business can be conducted, creating a much smoother environment where it is no longer necessary to anchor to existing network infrastructure.
We need to let go of the fear, uncertainty and doubt surrounding security.
Businesses need to be strategic in their actions and understand that if Zero Trust is in place or on the horizon, they already have access to great benefits or have taken the right steps.
The solution is not necessarily to develop new technology, but to design technology that will help the company become more competitive.
Zero Trust is uniquely positioned to provide this functionality as businesses evolve.