The Office of Management and Budget issued its guidance in January on meeting the requirements for agency networks to implement a Zero Trust architecture strategy. The mandate seeks to defend against sophisticated penetrations by adversaries, emphasizing identity management and access controls are key components of the strategies. Taken together, identity and access controls mean that privileged access management (PAM) is essential.

Industry experts at the roundtable discussion outlined:

• The methods, tracking procedures, and policies for data that plan to accomplish meeting requirements
• The challenges and realistic solutions needed to accomplish the critical components of Zero Trust architecture
• The specific objectives of the OMB – the top factors driving the requirement and the importance of centralized identity credential and access management programs and PAM requirements
• The varying levels of trust needed, along with mechanisms available and the costs/benefits analysis of cyber risk mitigation