探花视频

FNN Executive Briefing: Understanding the Critical Role of UX to Zero Trust

This ebook explores the intersection of UX and zero trust security architecture. Government agencies - including U.S. Citizenship and Immigration Services, FDIC, CBP and the Department of Education - and industry thought leaders weigh in on:

• Making the technology-policy connection
• Filling the gaps, reducing complexity
• Education security teams borrow UX ideas from others
• Moving toward an adaptive defensive posture

The Cybersecurity and Infrastructure Security Agency detailed five pillars in its Zero Trust Maturity Model. The Defense Department has specified seven pillars. John Kindervag of ON2IT, widely considered the father of zero trust, typically refers to four basic zero trust architecture design outcomes.

But whether embracing four, five or seven pillars, federal and industry experts have quickly come to understand one thing matters most when implementing a ZTA: user experience.

During a recent panel discussion convened by Federal News Network, federal chief information security officers and industry experts discussed how if zero trust adoption creates too much user friction, the entire initiative can collapse in on itself.

鈥淚t鈥檚 not about necessarily minimizing the impact on users. It鈥檚 actually being smart about the impact on users. One of my team members often calls it smart friction,鈥� said Shane Barney, CISO for the U.S. Citizenship and Immigration Services in the Homeland Security Department.

鈥淚n other words, we鈥檙e leveraging and adding in friction where it makes sense based on data. We鈥檙e applying it in very, very precise ways,鈥� he continued. 鈥淭o say that the user experience is always going to be positive and nirvana, I don鈥檛 think is legit. I think really what we鈥檙e aiming to do is being able to easily defend the security decisions behind why we added friction 鈥� where we added it 鈥� because you鈥檙e going to add friction with this process.鈥�

Barney said friction could come from a change in the geographic location that a user logs in from, for instance, or if the timeframe during which they log into the network is dramatically different than normal.

Jason Miller
Executive Editor
Federal News Network

Download the full report to learn how user experience affects your zero trust goals. Featuring insights from industry leaders are Crowdstrike, Okta and Zscaler.