Using Govern 365 to strengthen your Zero Trust Data pillar of the Zero Trust Extended Ecosystem (ZTX)

Introduction

During the last few years, Zero Trust has become the security model of choice for enterprises. This was coined by Forrester Research. Forrester has also defined the ZTX framework that helps organizations set their overall Zero Trust strategy. This framework includes the following pillars:

Zero Trust Data pillar

A lot of work has been done in most of the pillars, however, the Zero Trust Data pillar has much to be desired. This is primarily because it is a hard problem and most Chief Information Security Officers (CISO) come from the world of perimeter security space. Implementing the Zero Trust Data pillar requires security officers who have extensive data and security backgrounds.

Zero Trust Data requires identifying, categorizing, securing, encrypting, and managing the data both at rest and in transit.

Microsoft has done an excellent job with Microsoft Information Protection (MIP) to help provide a solution at the enterprise level that can be implemented. We find many organizations doing pilots with MIP but struggle to take it to full production for several reasons:

Govern 365 addresses the auto-classification problem by providing software that allows any user to create a secure container with pre-defined security (Virtual Data Room) in Microsoft 365. This container has security pre-defined so any file that is uploaded to the container will be automatically protected using the protection applied to the container at the time of creation.

These virtual data rooms are created in your Microsoft 365 environment and provide several benefits:

The virtual data rooms have several features:

Conclusion

At Netwoven, we have developed a robust framework to make your Zero Trust Data pillar implementation a success. You can reach us at info@netwoven.com to speak with one of the experts.