Why Implement Zero Trust

See current threats: ibm.biz/BdP3Qh
Learn about IBM zero trust security solutions: ibm.biz/BdP3QV
Moving to a hybrid, multicloud infrastructure means your resources are also likely scattered throughout multiple IT environments with varying levels of visibility and control. It’s difficult to know if the right user has the right access to the right data. You need context to help you make the right decisions. Distinguished Engineer, Jeff Crume explains how "the bad guy" may already be in your house - as an analogy, comparing it to your business.
Download a free AI ebook: ibm.biz/Trust_Free_AI_Ebook
Get started for free on IBM Cloud: ibm.biz/Zero_Trust_Free_Cloud...
Subscribe to see more videos like this in the future → ibm.biz/subscribe-now
#AI #Software #ITModernization #ZeroTrust #lightboard #IBM

[@amjads8971]

IBM knows how to creating videos explaining complex topics in a very simple and precise manner

[@davidkayembe5262]

Just incredible

[@timeglass777]

It is a good analogy of ZTA but its concepts are much broader. ID verification, Access control, Monitoring and Analysis are just few of the key principles.

[@louiseabigailpayuyo5120]

Excellent explanation! Very easy to understand. Thanks and hope you produce more of this type of content.

[@erikslorenz]

These vids rock. Whoever came up with the idea is the man

[@surenderarora1899]

Great analogy of House to simplify the understanding - How to secure IT infra at Zero Trust Level. Nicely Explained - Never Trust Always Verify. Thanks a lot Jeff!

[@jeffcrume]

Thanks for taking the time to provide encouraging feedback! I’m glad you enjoyed it!

[@mirochnik2008]

Impressive overview of complicated subject made simple by best of the best - @Jeff Crume!

[@jeffcrume]

Very nice of you to say so!

[@alexpishvanov736]

Clear and genius explanation! As usual :)

[@macshort2645]

Jeff this was a great presentation !!!

[@toenytv7946]

Well explained. Good comparisons.

[@johnwade1325]

This is a nice presentation. Thank you.
Another way I like to put it is this, "The role of security is to let the right people in, not to keep the wrong people out". Looked at it this way, zero trust doesn't look so draconian. This doesn't sit well with the house analogy, but does with real commercial computer systems (sadly, there have been cases throughout the history of IT where systems have been abused from the inside as well as from the outside).
The point about granting people only the rights they need is well made - though you do need facilities and procedures to give temporary access when a critical worker on a system is suddenly unavailable: someone has to have the authority to grant temporary access - and then take it away as soon as the usual person returns.
The point about "risk assessment" is also well made. You want everyone to come to your website and browse freely if you are selling something - but you want a solid guarantee of identity if they have a purchasing account with you: so different parts of your application may well have very different levels of security from total trust to zero trust, Granularity is key, and must be designed into the application from the outset. Good Code is Not Enough!

[@jeffcrume]

Well said, John!

[@gabicolaco3101]

It was very good, thanks for the explanation!

[@steveandreassend8620]

This is excellent!

[@dadoll1660]

Great analogy.

[@robpickles3736]

Awesome presentation! Thank you for sharing the knowledge.

[@jeffcrume]

Very kind of you to say!

[@theyield2521]

Brilliant stuff.

[@jay2004r]

This was a great explanation and great video!!

[@jeffcrume]

Thanks for watching!

[@tzlwin]

Very informative and useful, thank you.

[@jeffcrume]

Glad you liked it!

[@oladimejimichaeloloyede7203]

I like the build-up scenario of the house security, is like holding a baby's hand from level 0 to a higher level of talking about the least privilege. Thank you.

[@user-ty2yl4wp9z]

Thank you for the great information

[@jeffcrume]

Thank you for saying so!

[@alexxUKR]

Very short, but nicely packaged overview of zero trust concept. Thank you,

[@micheldupont636]

I think it lacks the explanation of “why zero trust is essential when you are using the public cloud ?”
Many companies are still thinking of perimetrical security because they are used of the “on premise” world. In the public cloud, the attacks can arrive from any place, any component…

[@karengomez3143]

“The things that I trust the most are the things that I have verified the most”
Depending on risks, we are setting our point in the implicit-zero tolerance spectrum… how much we’re willing to risk and our risk tolerance.

[@davidkayembe5262]

I give you ⭐⭐⭐⭐⭐

[@brooklyndreadlocks8182]

What kind of board is that? I want one.

[@IBMTechnology]

Search on "lightboard videos"

[@jeffcrume]

ua-cam.com/video/LdnJoT5IWPM/v-deo.html

[@rajaganji7982]

What does DMZ mean?

[@dadoll1660]

demilitarized zone

[@davidearthos6453]

only things i can verify.. do i trust .. start from zero and rebuild..

[@amjads8971]

Distinguish engineer,what is this role. This topic is related to security engineer isn’t it ?

[@IBMTechnology]

Distinguish Engineer is an IBM title that recognizes technical achievement over a long period; it involves a formal nominations by peers and executives.

[@rickharold7884]

Fun

[@RickLambert963]

How very 1984

[@michaelsloushch3950]

said nothing

[@TantalG]

I don't trust this man.

[@jeffcrume]

Zero trust in action! 😂

[@xelerated]

Well considering he is from IBM, not trusting him is a good thing

[@sergiomartinez5946]

Lol saying pay per view in 2024.