Gartner® Report

2023 Strategic Roadmap for Zero Trust Security Program Implementation

“Zero trust security architectures replace the implicit and static trust models of legacy security architectures with dynamic and explicit trust models. Security and risk management leaders must establish a clear roadmap for a zero trust program to optimize their organization’s risk posture.”

Services DDoS

Key Findings

  • “Organizations in North America, and increasingly other regions, have a strong desire to adopt a zero trust security paradigm to reduce risk to their organization, but have difficulty translating this desire into an actionable strategy with a roadmap, projects and measurable outcomes.”
  • “Vendors are marketing “zero trust” heavily as a way to buy improved security for organizations, but zero trust is not a technology. A zero trust paradigm regroups and emphasizes a set of cybersecurity principles that can be implemented across a range of technologies to address specific risks to an organization.”
  • “Organizations that implement technologies without a clear strategy and careful planning waste time and resources on incomplete implementations, and potentially create a false sense of security. Common roadblocks include legacy technology, scalability, integration and capability gaps in zero trust technology implementations, organizational resistance, and failure to consider business process impact.”
  • “Zero trust technology implementations introduce significant operational overheads, particularly when organizations lack a formal definition of “who should have access to what” and do not integrate technical controls that adapt to a dynamic environment.”

 

Gartner, 2023 Strategic Roadmap for Zero Trust Security Program Implementation, 13 April 2023, John Watts, Neil MacDonald, Thomas Lintemuth

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and is used herein with permission. All rights reserved.

Download the report