Implementing Zero Trust Principles in OT Environments

Zero Trust is a change in the security model away from network-based security to an application and data-centric view. Zero Trust is often associated with new methods of remote access to applications, especially modern cloud applications. Zero Trust includes several concepts – like strong authentication, limiting of access/authorization to resources, data protection, and monitoring of sessions – that are helpful to many security designs.  
 
Operational Technology (OT) environments work on an inherent trust model – which is quite the opposite of Zero Trust. That is one of many issues that make Zero Trust elusive in OT. Yet some of the concepts of Zero Trust can help to improve the cybersecurity of OT environments.  

Download the Dragos Guide to Applying Zero Trust Concepts in OT Environments to learn more about how you can borrow a few key elements that can help your security posture.