{"id":125862,"date":"2025-07-08T07:03:19","date_gmt":"2025-07-08T15:03:19","guid":{"rendered":"https:\/\/xira.com\/p\/2025\/07\/08\/another-great-zero-trust-resource-nist-provides-updated-guidance\/"},"modified":"2025-07-08T07:03:19","modified_gmt":"2025-07-08T15:03:19","slug":"another-great-zero-trust-resource-nist-provides-updated-guidance","status":"publish","type":"post","link":"https:\/\/xira.com\/p\/2025\/07\/08\/another-great-zero-trust-resource-nist-provides-updated-guidance\/","title":{"rendered":"Another Great Zero-Trust Resource \u2013 NIST Provides Updated Guidance"},"content":{"rendered":"

Ed. note<\/u>: This is the latest in the article series,\u00a0Cybersecurity: Tips From the Trenches<\/strong>,<\/em>\u00a0by our friends at\u00a0Sensei Enterprises<\/a>, a boutique provider of IT, cybersecurity, and digital forensics services.<\/em><\/p>\n

The National Institute of Standards and Technology (NIST) is an excellent resource for businesses seeking guidance and instruction to secure their information systems. This month, NIST dropped SP\u202f1800\u201135, a practical practice guide boasting 19 real-world zero\u2011trust example implementations using off\u2011the\u2011shelf technology from big-name vendors. It is a great starting point for firms of all sizes when developing Zero Trust architecture.<\/p>\n

Why This Matters<\/strong><\/p>\n

Traditional cybersecurity followed a set-it-and-forget-it mantra \u2014 keep the bad guys out, and we\u2019re good. Firewalls were the defender that many firms solely relied upon. That doesn\u2019t cut it anymore. As NIST points out, modern networks are hybrid beasts: cloud servers, employee homes, airport Wi\u2011Fi, mobile devices \u2014 you name it. Consequently, cybersecurity threats don\u2019t just knock at the front door; they\u2019re looking for every possible way into your systems and environment.<\/p>\n

Zero Trust flips the script. Instead of trusting the perimeter, it uses a \u201cTrust No One\u201d approach to treat every access request with suspicion. This is especially critical in a remote technological environment, where users and information live and are accessed outside the traditional perimeter. Zero Trust evaluates users, devices, and locations based on identity, device posture, behavior, geolocation, and more before granting access.\u202fFor attorneys handling sensitive data, privileged communications, case materials, and client information, this granular access control is essential to keeping your information safe. Switching from traditional cybersecurity approaches to Zero Trust requires a change to a risk-based approach, planning, and careful implementation.<\/p>\n

This latest guide provides plug-and-play architectures you can adapt to your firm. It includes the technology, workflows, and security settings and controls behind each architecture and scenario, plus best practices and lessons learned. You can choose which architecture best fits your firm\u2019s environment, whether it\u2019s Microsoft 365, Google, or Cisco. The guides also assume your technology environment is hybrid, meaning both cloud and on-prem, demonstrating how Zero Trust works for your configuration. It also stresses that adopting Zero Trust is a journey and does not happen overnight. Firms must start somewhere \u2014 why not start with your most sensitive data and move on from there? Taking the first step is always the most challenging part.<\/p>\n

Key Takeaways<\/strong><\/p>\n