Identify key stakeholders in your organization, review your Zero Trust business drivers, capture the relevant use cases and requirements and review your existing security architecture.
Assess your environment including identifying high value assets and determine your classification policy, conduct a gap analysis between your Zero Trust use cases and your existing security architecture, determine success criteria and develop a Zero Trust roadmap.
Select best-fit technologies for your environment and requirements, remediate identified gaps from the Assess phase, conduct a detailed design document and secure proper sign off, review and update the roadmap and update the Zero Trust desired business outcomes.
Develop Zero Trust configuration policies, test and validate those policies in pilot groups, document the exception process and perform final policy tuning, roll out the Zero Trust policy and provide next day support.
Provide knowledge transfer and operational training, exception and change remediation training, configuration and device management procedures, quarterly health checks and best practice assessments and violation monitoring tuning.
