BeyondCorp Weekly 4
Ivan Dwyer - January 24, 2017
If you recall from last week, Google released a detailed whitepaper about their infrastructure security. Expanding on the topic, I wrote up another post to talk about their practices in context of BeyondCorp – Google’s Infrastructure Security Design Revealed. I’d be interested in hearing your take, so feel free to drop me a note.
Now it goes without saying that it’s been an interesting week of news. Staying on track because we all have work to do, here’s another handful of relevant articles that caught my attention this week.
‘Zero Trust’: The Way Forward in Cybersecurity [DarkReading]
John Kindervag delivers sound reasoning for the Zero Trust security model, along with some steps to move in that direction.
Fired IT Employee Demands $200K in Exchange for Unlocking Data [TripWire]
Another semi-comical example of an insider attack that could have been avoided with better privileged account management.
Why it’s time to stop blaming open source for ransomware attacks [TechRepublic]
There’s been a lot of talk around insecure usage of open source software, but Matt Asay explains why it’s not the fault of the model itself.
If you don’t trust your employees to work remotely, you shouldn’t have hired them in the first place [Quartz]
This article may not be related to security, but it does promote remote work, which is core to why BeyondCorp was designed the way it was. Some good points to be made here.
Mozilla’s First Internet Health Report Tackles Security, Privacy [ThreatPost]
Mozilla put a lot of effort into this report about the state of Internet security, with a strong emphasis on privacy and secure communications. Worth a read.
Upcoming Events
BeyondCorpSF Happy Hour
Tuesday, Jan 31
7PM - 10PM
District Oakland
827 Washington St
Oakland, CA 94607
That does it for this week. Check back this time next week for another set of relevant news, articles, and events. Cheers,
Ivan at ScaleFT
Ivan Dwyer
Ivan Dwyer is the VP of Product Marketing at ScaleFT, working with the community to raise awareness around BeyondCorp and Zero Trust for organizations of all kinds looking to modernize their security architecture.
