Implementing Zero Trust Framework
Securing the Future with Zero Trust
Team Members:
- Mahsa Ghaderi (CSEC)
- Khaled Al-Sahili (CSEC)
- Luckas Saliba (CSEC)
A layered approach to cybersecurity is vital in order to combat forthcoming and new threats. The project explores the implementation of Zero Trust Architecture (ZTA), based on the principle of “never trust, always verify”, in a mimicked environment representing a financial department with one main server and five computers.
In alignment with NIST ZTA guidelines, security features, system testing, policy development, and a training program were established. Key challenges were identified in the process, such as addressing technical debt and advanced attacks that bypass Zero Trust security measures.
These findings lead to strategic recommendations such as systems upgrades, cloud services implementation, and integrated security collaborations, that offer a clear understanding of the obstacles and provide strategies to overcome them for organizations considering ZTA adoption.