I dismissed it a few years ago as a harmless hype but I am now seeing real harm being caused by this hype.
To avoid writing an essay here let me keep it short and explain why: I am seeing orgs spending valuable time, money and resources on box checking and implementing false security all over. It is being used in place of improving security posture that is aware of threat context facing the organization. It has scope-creeped beyond the original intended purpose of ensuring all actions are explicitly authorized and eliminating implicit trust to mean a buch of ridiculous goals and hype words no one can explain consistently.
I caution everyone to avoid using the term but to still implement the original beyondcorp architecture.
Another cancer that is begining to spread:"passwordless".
I dismissed it a few years ago as a harmless hype but I am now seeing real harm being caused by this hype.
To avoid writing an essay here let me keep it short and explain why: I am seeing orgs spending valuable time, money and resources on box checking and implementing false security all over. It is being used in place of improving security posture that is aware of threat context facing the organization. It has scope-creeped beyond the original intended purpose of ensuring all actions are explicitly authorized and eliminating implicit trust to mean a buch of ridiculous goals and hype words no one can explain consistently.
I caution everyone to avoid using the term but to still implement the original beyondcorp architecture.
Another cancer that is begining to spread:"passwordless".