Zero trust is a necessary evolution for businesses to be cyber secure in our digital modern landscape. To eliminate cyber risk and threats, businesses can implement a zero trust approach to protect data and systems every step of the way.
20 June 2022 • 3 min read
Senior Vice President Cybersecurity and Lead for IoT/OT NTT DATA DACH
More from this contributorThe issue of zero trust often appears after the introduction of various cloud applications. In some cases, we also have customers where the CIO or CISO gets questions from the board about cybersecurity, data protection and the risks for the company. They are then asked specifically about their own IT strategy for zero trust.
The question arises of how to ensure secure access for a distributed environment. Zero trust architecture means that everyone who wants to access data, applications and systems in the cloud and the corporate network is treated in such a way as if they were an untrustworthy outsider.
Whenever data migrates to the cloud – whether Microsoft, AWS or Google – and cybersecurity awareness increases as a result of incidents in the press, at partner companies or even in your own company, the question arises of how to ensure secure access for a distributed environment. Then it says: we want maximum security, ideally a zero trust architecture. That means that everyone who wants to access data, applications and systems in the cloud and the corporate network is treated in such a way as if they were an untrustworthy outsider.
From now on there is no longer a leap of faith for employees. What does that mean in practice?
The good news for you is, in the first step, zero trust does not require you to completely rebuild the entire network and cloud infrastructure, nor to carry out micro-segmentation down to the last small segment. Likewise, new hardware for the entire network does not have to be purchased immediately. And no, there is no need for an assessment of the entire infrastructure in all parts of the company either – unless you want to introduce zero trust according to textbooks, which means that nothing happens for at least a year. By “nothing” I mean: this year your data will not be a millimeter more secure. That’s why we at NTT DATA are tackling the issue pragmatically so that our customers can quickly benefit from more security.
So that we don’t misunderstand each other, of course, before every zero trust project, we take stock. Which technologies are in use? Which cloud-based applications? What is the status of authentication? However, instead of examining all aspects of Zero Trust – identities, end devices, applications, network, infrastructure and data – we build on the basis of Zero Trust, namely the existing identity management with rights, roles, organizational units and suitable strong authentication processes for the users. This forms the basis for Zero Trust.
With a solution-oriented approach, you have more data security with every measure.
The second step is then to identify applications and systems that can be easily optimized in the direction of Zero Trust. These mostly include cloud applications, where the microservices can be segmented with relatively simple means, connected to the identity management via a ‘conditional access engine’ and the data can be secured within the application. With this solution-oriented approach, you have a bit more data security with every measure. In good business terms, with our customers, we are getting more and more Zero Trust, quick win for quick win.
As I said, the first thing we do is focus on our customer’s existing identity management. Experience shows that people often think in black and white, i.e. either no access at all or full data access. This rarely helps data security and data protection. Here it is important to raise barriers according to defined roles and access authorizations and requirements and thus to implement secure, always traceable ‘limited access’.
To anyone who is now wondering whether it might not be better to convert the entire infrastructure to Zero Trust right away, I would like to answer the following:
If employees access the company’s cloud services from home, then they don’t have any infrastructure operated by you in between. A highly secure company IT structure does not protect the data from access from mobile devices – whether it is on the desk at home, in the ICE on-board restaurant or in the lecture room of a hotel.
A Zero Trust network concept is certainly important and should not be neglected, but it is not the first priority for the project start. Usually there are also dependencies on the hardware or software used and it has turned out to be easier to focus on these topics based on Zero Trust concepts when replacing hardware or software after maintenance has expired. That’s why I advise you: start Zero Trust with identity management and applications where the implementation does not require a complete redesign. For an initial, professional overview, we recommend our Strategic Guide to Zero Trust.
Data strategy & BI Security TrustDiscover more in
BlogBusinesses across all industries have been forced to find solutions to a rapidly evolving market environment since the outbreak of coronavirus. For many firms, the economic challenges of Covid-19 have heavily disrupted their supply chains. But supply chain finance has provided a valuable lifeline during this highly turbulent time. Now, many innovations are emerging, offering enormous value for banks, buyers and suppliers.
27 January 2023 • 4min read
Leaders will do well to remember that crises always present opportunities for improvement and advancement. By embracing agility and using data and analytics to their best advantage, leaders will be in a stronger position to navigate through the near-term challenges that the pandemic has raised.
01 June 2021 • 4min read
Worldwide retention of top talent has been an organisational issue for some time now. The recent ‘turnover tsunami’ headlines show us the problem isn’t getting better. Here’s how NTT DATA Business Solutions Turkey, Middle East and North Africa have managed to retain 97% of new employees in the last five years.
01 September 2021 • 4min read
AI is maturing. One of its newest uses can help advertising match the most relevant content to the viewer, touching gaming, TV. Here’s how.
01 February 2022 • 2min read
AWS Digital Twins can transform the industrial sector. The data collected from a digital twin delivers actionable insights into the complete lifecycle of processes, providing the tools to optimize workflows, optimize the supply chain, manage product quality, and spot any errors before they happen.
13 April 2023 • 8min read
As digital native challenger banks rapidly encroach, it has become imperative for retail banks to move to the cloud to compete. There are numerous benefits associated with cloud migration, but they should also be aware of the pitfalls.
30 March 2023 • 3min read
Those designing the digital products and services we use every day have a great responsibility. Technology has the power to change the world, by connecting and empowering us all. But designers can’t do this alone – business leaders and decision-makers must act now, embedding ethical practices today, to make sure we’re on the right path.
21 September 2022 • 4min read
Creativity within organizations is vital in promoting the dynamic mindset necessary to enact innovation and change, and create value. NTT DATA’s value co-creation program nurtures creative thinking through four key stages.
13 April 2023 • 6min read
When it comes to consumer goods, standards are exactingly high across the industry, and processes are often complex. Digital transformation across multiple vectors – from logistics to packaging to quality control – can both revolutionize efficiency and ensure that the highest standards are met.
30 March 2023 • 6min read
The experience of the past months has been an opportunity to reflect on the office of the future. Here's how we imagined it. Translated from Italian
01 February 2021 • 3min read
01 February 2022 • 4min read
Today, there is no lack of critical issues that are holding back the take-off of electric mobility. Here are the issues to be solved for a more sustainable tomorrow. Translated from Italian
01 June 2021 • 4min read
Obtaining data can open up a whole wealth of business opportunities, as long as the data is valid and trustworthy. However, having incorrect, outdated or inaccurately sampled data can be damaging and costly. In such turbulent times, how can we secure data integrity for the best outcomes for businesses?
13 June 2022 • 6min read
Crises are usually accompanied by a host of challenges to overcome. Vicki Chauhan, Head of Public Sector at NTT DATA UK, is focusing on opportunities for improvement born out of the recent global pandemic.
01 February 2021 • 3min read
As we strive to make sense of the global changes around us and balance our working and personal lives, the expectations of leadership have changed too. As consumers, Gen Zs are particularly known to hold organizations to account, and they’re no different in their expectations for work.
21 September 2022 • 4min read
When we think of the metaverse, we should not think of a hypothetical world but of a certain future. Technologies including augmented reality, IoT, cybersecurity and blockchain come together to form this new virtual space, and the opportunities for businesses and consumers alike are plentiful. But rather than trying to replicate the current world, we must be brave and creative in imagining a new one.
23 November 2022 • 5min read
Imagine if process automation was a matter of simply typing what you want. Well, this just became a reality. At a recent hackathon, an NTT DATA team demonstrated an innovative approach that integrates RPA bots and chatbots. The result was a tool that freed users from time-consuming, repetitive tasks, allowing them to focus on adding value while using natural conversation capabilities.
01 February 2022 • 3min read
Leaders want their automation strategy to deliver long-lasting value and an attractive ROI. To achieve this, you need a data-driven strategy and a unified IT landscape, plus the courage to forge into new automation territories.
01 February 2022 • 3min read
With consumers able to choose between increasingly vast ranges of similarly-priced products and services, customer experience has become an important point of differentiation for businesses. If harnessed strategically, it can become a valuable source of revenue growth.
27 January 2023 • 4min read
Most companies use workload automation software to automate business processes. However, reality also shows that a patchwork of different solutions quickly reaches its limits if end-to-end control across applications, data and infrastructures cannot be guaranteed.
01 February 2022 • 2min read
Effective leaders know how to cultivate the environment that is most conducive with experimentation and learning, by having an unwavering focus on putting your people first.
01 October 2020 • 2min read
The different needs of cybersecurity continue to evolve, in the same way that businesses must adapt and respond to these cybersecurity risks and challenges. Partnerships are just one of the many ways in which businesses can protect themselves and move with the times.
20 June 2022 • 4min read
Recent media coverage, such as BBC’s Panorama program that aired on 6th February, would lead some to conclude that cloud computing stands in opposition to environmental sustainability. The claim is focused on the ‘greedy’ data centers that support consumer applications such as Facebook and TikTok, which seem so essential to modern life. However, there is a strong pro-sustainability argument for the cloud.
17 April 2023 • 5min read
Understanding how best to care for your employees, as we transition into a post-pandemic working environment, stems from a strong company culture. With culture as the foundation, leaders can protect and promote wellbeing, authenticity and effective communication.
01 June 2021 • 3min read
Strict ID checks become increasingly imperative in our rapidly evolving digital landscape, but sometimes they can be arduous. How can companies protect themselves and their customers from cyber risk while ensuring their processes are convenient, effective and user friendly?
22 June 2022 • 4min read
The demand for digital skills is only accelerating as organizations embrace hybrid working. To meet the demands of the future workforce, training – for everyone, no matter where they are in their careers – is essential to ensure the digital skills gap does not hold your organization back.
21 September 2022 • 4min read
There are misconceptions around Zero Trust, as businesses may be fearful of a perceived need to completely rebuild their security architecture, but all it takes is a step-by-step approach. What is the journey to making the security of your business airtight?
20 June 2022 • 4min read
Why leaders need to embrace change at an organisational and cultural level to be able to manage the evolving landscape of business relationships, and how small steps can make all the difference.
01 October 2020 • 3min read
The zero trust journey is all about taking measures to assure your business security at every level. While it sounds complex, it is more simple than it seems, and is worth every effort to ensure that access to data is only granted to those who have sufficiently proved their identity at every stage necessary.
13 June 2022 • 4min read
In the processes of conceiving and applying technological transformations, partnerships between universities and the business world have proved to be indispensable says Giorgio Scarpelli, Senior VP, Chief Technology & Innovation Officer at NTT Data Italy
01 February 2021 • 3min read
27 January 2023
From data privacy to employee job security, there are a number of reasons why businesses might be anxious about automation. NTT DATA looks at how it has helped various health insurance companies overcome their fears and live happily (and profitably) alongside automation.
01 February 2022 • 4min read
They say that necessity is the mother of invention, and that has certainly proved to be the case in the NHS pandemic response.
01 February 2021 • 4min read
How can a business’s core people function bring employees together when a global pandemic is keeping them apart? Culture is more important than ever to ensure that your people know they are valued, and to maintain a healthy and thriving internal community.
01 October 2020 • 3min read
As our digital abilities become increasingly sophisticated, our cybersecurity measures develop at the same pace that a cybercriminal’s savviness also can. Businesses must continue to take the right measures to protect their futures with the developments of remote access and other digitization efforts.
22 June 2022 • 5min read
How can we design the right environment for businesses to get the most from automation, so that current and future employees can focus on the human aspects of value creation?
01 October 2020 • 3min read
New EU legislation means that providing reporting on your organization’s CO2 emissions will soon be mandatory. Finding efficient ways to do this is crucial – and a good place to start is with specialized technology, which can help to calculate carbon impact in just a few clicks.
30 March 2023 • 5min read
One of the UN’s Global Goals is that of Sustainable Cities and Communities, to make these urban areas safe, resilient and inclusive as well as reduce energy consumption and carbon emissions. On the Danish island of Rømø, NTT DATA Business Solutions is employing a versatile data platform to analyse and forecast flows of people, holidaymakers’ buying habits, water and energy consumption, traffic flows, weather information, and data from the web – making Rømø a truly ‘smart island’.
01 June 2021 • 3min read
Innovation in technology has great potential in helping to provide accessible, tailored learning for every child. Through our AIDA project, we created a unique system that could give caregivers and educators the information they need by bringing together elements from design, AI, IoT and VR.
01 September 2021 • 4min read
Technological development is an important vehicle to achieve sustainability, but companies must open up to innovation. Developments in the Blue Economy – protecting our marine environment and sustainably using ocean resources for improved social and economic life – offer inspiring examples of how technology is helping to protect and enhance the most vital element of our planet’s natural resources.
01 September 2021 • 4min read
Carbon credits are already a rapidly growing market, and will soon become a crucial component – alongside the reduction of greenhouse gas emissions – in achieving carbon neutrality across all industries.
17 April 2023 • 6min read
In the wake of the pandemic, the demand for temperature-sensitive products has never been higher – and the need for efficient, well-functioning cold chains has never been more apparent. With global supply chains already under pressure, the cold chain faces unique additional challenges.
27 January 2023 • 3min read
With the radical changes affecting both business and technology, the energy sector has to deal with significant upheaval in the coming years, focusing on the key themes of digital transformation, electric mobility and people.
01 June 2021 • 4min read
With so much upheaval to the work environment in just a few years, our expectations of and relationship with work have changed completely. How can organizations prepare for these shifts as employees set new boundaries and seek purpose at work?
21 September 2022 • 5min read
Smarter and more sustainable workplaces are essential for all businesses as we tentatively emerge from the restrictions of the pandemic. Technology is pivotal in not only providing a seamless user experience but also in building a greener IT strategy.
01 September 2021 • 6min read
Covid has accelerated the trend towards “digitally-oriented” consumers. Companies in the media sector must be ready to seize the opportunities linked to this evolution, investing in key areas including security, data and blockchain. This will be crucial for companies in the media sector to survive in a hyper-competitive and fragmented market.
01 June 2021 • 4min read
The dynamic between employee and employer has shifted. People are now more selective about who they work for, placing greater importance on purpose and culture. To attract and retain talent, organisations need to be clear about why they exist, and live those values in everything they do.
01 October 2020 • 3min read
Amid today’s widespread economic turbulence and uncertainty across global markets, businesses are under pressure to build and maintain organizational resilience through digital transformation. But how should they do this without getting swept up in the drama of external disruption?
27 January 2023 • 5min read
Bias in technology is real, and as we design and build increasingly powerful systems, our obligations to those using the technology increase in step. Two experts share what they’ve learned for building diverse and efficient teams and ethical AI frameworks.
25 October 2022 • 3min read
As the UK energy industry collectively works towards the government’s ambitious emission reduction targets, robust digital strategy and unified data principles will be the bedrock for successful cross-sector modernization.
24 February 2023 • 3min read