No standing still: Zero Trust and cybersecurity
Businesses must embrace Zero Trust to protect data against increasingly sophisticated cyberattacks.
Cybersecurity incidents are on the rise, with businesses of all sizes and industries facing increased threats. In October, a Jaguar Land Rover cyberattack cost the UK economy approximately £1.9 billion. In North America, WestJet suffered a data breach in June, stealing personal information of 1.2 million passengers, while Collins Aerospace reported a potential compromise of data for 1.5 million flyers after an attack in September.
Public trust in industries handling sensitive data is declining, with no sector achieving over a 50% approval rate. Businesses must adopt a modernized security strategy to mitigate the risk of breaches, which can lead to reputational damage, operational delays, and financial loss. Zero Trust is a crucial approach to security, focusing on data over assumptions.
Despite 96% of companies planning to implement this strategy, only 35% have begun the implementation process. The key to success lies in a mutual understanding of Zero Trust and industry-wide adoption. Traditional cybersecurity approaches, such as VPNs, have led to a single perimeter around data, allowing cybercriminals to access and duplicate information once breached.
A Zero Trust approach confines access to the specific area of the breach, limiting the impact of potential attacks. Security teams must evaluate risks on a case-by-case basis, deciding whether to accept, mitigate, or transfer risks. The Zero Trust principle requires an adaptable security infrastructure, capable of adjusting to threats as they evolve.
With cybersecurity budgets growing, organizations must ensure their investments are long-term, continually questioning access and adapting to emerging threats.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
