![\"Retail](\"https:\/\/dmsretail.com\/RetailNews\/wp-content\/uploads\/2022\/05\/RETAIL-ONLINE-TRAINING-728-X-90.png\")
<\/a><\/p>\n<\/p>\n
Speaking to many CISOs, it\u2019s clear that many security executives view zero trust as a journey that can be difficult to start, and one that even makes identifying successful outcomes a challenge. Simultaneously, the topic of security resilience has risen up the C-level agenda and is now another focus for security teams. So, are these complementary? Or will they present conflicting demands that will disrupt rather than assist the CISO in their role?<\/p>\n
One of the most striking results coming from Cisco\u2019s latest Security Outcomes Report is that organizations with a mature zero trust implementation \u2013 those with basic controls, constant validation and automated workflows \u2013 experience a 30% improvement in security resilience compared to those who have not started their zero trust journey<\/strong>. So, these two initiatives \u2013 implementing zero trust and working to achieve security resilience \u2013 appear to complement each other while supporting the CISO when a cyber black swan swims in.<\/p>\n Security resilience is the ability to withstand an incident and recover more strongly. In other words, ride out the storm and come back better. Meanwhile, zero trust is best known as a \u201cnever trust, always verify\u201d principle. The idea is to check before you provide access, and authenticate identity based on a risk profile of assets and users. This starts to explain why the two are complementary.<\/p>\n The Security Outcomes Report summarizes the results of a survey of more than 4,700 security professionals. Among the insights that emerge are nine security resilience outcomes they consider most important. The top three outcomes for resilience are prevention<\/strong>, mitigation <\/strong>and adaptation<\/strong>. In other words, they prioritize first the ability to avoid an incident by having the right controls in place, then the ability to reduce and reverse the overall impact when an incident occurs, and then the ability to pivot rapidly without being bound by too rigid a set of systems. Zero trust will support these outcomes.<\/p>\n Preventing, or reducing the likelihood of a cybersecurity incident, is an obvious first step and no surprise as the most important outcome. Pursuing programs that identify users and monitor the health of devices is a crucial a preventative step. In fact, simply ensuring that multifactor authentication (MFA) is ubiquitous across the organization can bring an 11% improvement in security resilience.<\/strong><\/p>\n When incidents occur, security teams will need a clear picture of the incident they are having to manage. This will help in them respond quickly, with a proactive determination of recovery requirements. Previous studies show that once a team achieves 80% coverage of critical systems, the ability to maintain continuity increases measurably. This knowledge will also help teams develop more focused incident response processes. A mature zero trust environment has also been found to almost\u00a0double a team\u2019s ability to streamline\u00a0these processes when compared to a limited zero trust implementation.<\/p>\n When talking to CISOs about successful implementation programs, communication within the business emerges as a recurring theme. Security teams must inform and guide users through the phases of zero trust implementation, while emphasizing the benefits to them. When users are aware of their responsibility to keep the organization secure, they take a participatory role in an important aspect of the business. So, when an incident occurs, they can support the company\u2019s response. This increases resilience. Research has shown<\/span>\u00a0that\u00a0a<\/b>\u00a0mature program will more than double the effect of efforts to improve the security culture<\/b>.<\/span>\u00a0Additionally, the same communication channels established to spread the word of zero trust now can be called upon when an incident requires immediate action.<\/p>\n Mature implementations have also been seen to help increase cost effectiveness and reduce unplanned work. This releases more resource to cope with the unexpected \u2013 another important driver of resilience surfaced in Volume 3 of the Security Outcomes Report. Having more efficient resources enables the security function to reallocate teams when needed. Reviewing and updating resource processes and procedures, along with all other important processes, is a vital part of any of any change initiative. Mature zero trust environments reflect this commitment continuous assessment and improvement.<\/p>\n Inherent in organizational resilience is the ability to adapt and innovate. The corporate landscape is littered with examples of those who failed to do those two things. A zero trust environment enables organizations to lower their risk of incidents while adapting their security posture to fit the ongoing changes of the business. Think of developing new partners, supporting new products remotely, securing a changing supply chain. The basic tenets of MFA \u2013 including continuous validation, segmentation and automation \u2013 sets a foundation that accommodates those changes without compromising security. The view that security makes change difficult is becoming obsolete. With zero trust and other keys to achieving security resilience, security now is a partner in business change.<\/strong> And for those CISOs who fear even starting this journey, understanding the benefits should help them take that first step.<\/p>\n Download the <\/strong>Security Outcomes Report, Vol. 3: Achieving Security Resilience<\/em><\/strong> today. <\/strong><\/p>\n Learn more about cybersecurity research and security resilience:<\/p>\n We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!<\/em><\/p>\n Cisco Secure Social Channels<\/strong><\/p>\n Instagram<\/strong> Share:<\/p>\n \n \t<\/div>\n![\"Cisco](\"https:\/\/storage.googleapis.com\/blogs-images\/ciscoblogs\/1\/2022\/12\/fgcgfc.png\")
<\/p>\nThe top security resilience outcomes<\/strong><\/span><\/h2>\n
Communication is key<\/strong><\/span><\/h2>\n
Adapt and innovate<\/strong><\/span><\/h2>\n
Facebook<\/strong>
Twitter<\/a><\/strong>
LinkedIn<\/strong><\/p>\n