ISC2 Think Tank: Using Zero Trust as a Cloud Security Strategy: Your Questions Answered

May 12, 2025

—

Source URL: https://www.brighttalk.com/webcast/5385/642815
Source: ISC2 Think Tank
Title: Using Zero Trust as a Cloud Security Strategy: Your Questions Answered

Feedly Summary: Jason Garbis, Founder & CEO of Numberline Security and Co-Chair of the Zero Trust Working Group at the Cloud Security alliance, recently presented during the ISC2 Spotlight on Cloud Security, offering an in-depth exploration of Zero Trust as a modern cloud security strategy. The session examined where organizations currently stand on the Zero Trust maturity curve and how closely real-world implementations align with the Zero Trust Maturity Model.
Following this highly rated presentation, Jason returns for a special fireside chat with moderator Brandon Dunlap to address top questions raised during the session. Among the topics: Which Zero Trust mechanisms are most effective in mitigating lateral movement across hybrid and multi-cloud environments? How should Zero Trust strategies adapt in response to the rise of generative AI and AI-driven attacks? And how are organizations aligning Zero Trust efforts with established governance, risk, and compliance (GRC) frameworks?
Don’t miss this opportunity to be part of the conversation. Join us on May 29, 2025, at 1:00 p.m. Eastern / 10:00 a.m. Pacific.

AI Summary and Description: Yes

Summary: Jason Garbis explores Zero Trust as a modern cloud security strategy, discussing its maturity model and real-world applications. Key considerations include adapting Zero Trust to generative AI threats and integrating it with governance, risk, and compliance frameworks.

Detailed Description: The text highlights Jason Garbis’s presentation and subsequent fireside chat focused on the Zero Trust security model, an increasingly pivotal framework in cloud computing security. As organizations face a dynamic threat landscape, including the rise of generative AI, Garbis addresses several crucial topics, underscoring the importance of Zero Trust not just as a concept but as a necessary practice.

– Key Themes Addressed:
– **Zero Trust Maturity Curve**: The session provided insights into where organizations currently stand in their Zero Trust adoption and how well their implementations correspond to the structured maturity model. This is vital for understanding gaps and areas for improvement.
– **Mitigating Lateral Movement**: Garbis discussed effective Zero Trust mechanisms to combat lateral movement threats within hybrid and multi-cloud infrastructures, signaling the diverse security challenges faced in complex environments.
– **AI and Zero Trust**: With generative AI and AI-driven attacks on the rise, strategies related to Zero Trust must evolve. This reflects a broader recognition of evolving threats in cybersecurity and the corresponding need for adaptive security measures.
– **Governance, Risk, and Compliance (GRC)**: The session also highlighted the alignment of Zero Trust initiatives with existing GRC frameworks, emphasizing the necessity of integrating security into the overall governance landscape, thus ensuring compliance and risk management are core to security strategies.

This discussion is particularly relevant for security and compliance professionals looking to deepen their understanding of Zero Trust in the context of contemporary challenges, including AI threats. It encourages integrating Zero Trust principles into broader IT security practices and compliance efforts, making it a foundational topic for training and strategy development in the security domain.

1 10 2 2025 3 4 5 53 a Act adaptive adaptive security addresses adoption AI air alignment Alliance and app Application applications art as attack attacks Bi C C2 challenges chat CI CIA Cloud cloud computing cloud computing security cloud environment cloud environments cloud infrastructure cloud security Cloud Security Alliance co compliance Compliance efforts compliance framework compliance frameworks compliance professionals Computing concept Context conversation core cross Current cyber cybersecurit Cybersecurity D de deep depth development domain drive driven Driven Attacks e effective environment evolving threats exp exploration face focused for framework frameworks g Gen generative Generative AI Go governance GRC Group H high Highlight HR http HTTPS hybrid implementation in infrastructure infrastructures initiatives insights Iron J Jason Garbis Just k Key l land lateral movement led Li low M making man management maturity measures Mode model moderator Modern multi multi-cloud multi-cloud environment multi-cloud environments N no o of off on OPM opt organization organizations over pre principles professionals Q question R rag Raise rate RCE real real-world applications red response return right Risk risk management Ro RSA Rust Rust adoption s sec security security and compliance security challenges security measure security measures Security Model security practices security strategies security strategy side Sig Signal source SSE strategies Strategy structured structures T text the threat threat landscape threats to Tor TP training trust trust mechanisms trust principles Trust Security turn under up US use V web Well Wi world world applications x zero Zero Trust Zero Trust maturity Zero Trust Maturity Model Zero Trust security Zero Trust Security Model