{"id":11280,"date":"2025-06-24T17:56:36","date_gmt":"2025-06-24T17:56:36","guid":{"rendered":"https:\/\/colemandev.directivesites.com\/don-t-trust-verify-how-john-kindervag-shifted-our-approach-to-security\/"},"modified":"2025-06-24T20:00:22","modified_gmt":"2025-06-24T20:00:22","slug":"don-t-trust-verify-how-john-kindervag-shifted-our-approach-to-security","status":"publish","type":"post","link":"https:\/\/colemantechnologies.directivesites.com\/?p=11280","title":{"rendered":"Don\u2019t Trust, Verify: How John Kindervag Shifted Our Approach to Security"},"content":{"rendered":"
\n
\n
\n\"ZeroTrust_1026923417_400\"
\n<\/a>\n<\/div>\n

Businesses of every size need to prioritize their security. This fact has not changed and will not change anytime soon. What has changed, however, are the recommended ways to approach this security.<\/p>\n

Today, we wanted to review the history of today\u2019s predominant cybersecurity advice and explore how the zero-trust security model applies.<\/p>\n

Meet John Kindervag, the Godfather of Zero Trust<\/h2>\n

Once an apprentice to be a typewriter repair specialist before transitioning into the role of broadcast engineer and then diving into the world of computer animation (and building his own high-end computers in his spare time), Kindervag ultimately credits the video game Doom<\/em> for his interest in networking.<\/p>\n

How a Game Inspired Today\u2019s Most Effective Network Security Strategy<\/h3>\n

Under the pretense of using it to transfer animated files (which were too large to be shared in this way at the time), Kindervag convinced his bosses to allow him to build an ethernet network to more effectively support the after-hours multiplayer LAN (local area network) parties that were held in the office.<\/p>\n

He wasn\u2019t the only one, by the way\u2026 many advancements in computing and networking were initially made in the interest of playing Doom<\/em> (no word on whether they were primarily using it to play the cooperative multiplayer campaign or the player versus player deathmatch mode).<\/p>\n

However, as he worked on these networks, Kindervag realized they were inherently insecure, with little attention paid to their security in favor of routing and switching. With the only protection being a firewall to keep threats out, there was little stopping users from removing data from the network. The trusted, internal network that the business maintained could easily allow data to be shared to an untrusted, external network\u2026 like the Internet.<\/p>\n

John saw this as \u201cinsane\u201d\u2014his word for it\u2014and concluded that all interfaces should have zero inherent trust. Hence, the zero-trust framework.<\/p>\n

How Zero-Trust Works<\/h2>\n

To create a zero-trust system, there are five critical steps that an organization must take:<\/p>\n

Step One: Defining the Protect Surface<\/strong>
As Kindervag puts it, \u201cZero Trust inverts the traditional problems of cybersecurity. Instead of focusing on what’s attacking you, it focuses on what I call the Protect Surface. What do I need to protect?\u201d<\/p>\n

In other words, you need to identify all the data you have that needs to be protected, whatever form that data takes. Only then will you know the scope of your data protection needs and be able to cover them adequately.<\/p>\n

Step Two: Mapping Your Data<\/strong>
So, once you know what data you possess, you need to fully understand how the rest of your business and its IT infrastructure interact with it. Which users need access to what, which applications regularly access this data, and how is your infrastructure set up to store and transfer it? This information is critical to the next step.<\/p>\n

Step Three: Designing an Architectural Framework<\/strong>
With all these insights in mind, you must then create a framework that meets all of the above needs and requirements, explicitly considering your IT infrastructure and its construction. While some frameworks may ultimately look similar, any zero-trust strategy needs to be customized to the individual business\u2014hence, all the audits and mapping.<\/p>\n

Step Four: Creating Your Zero-Trust Policies<\/strong>
With your network designed to be more security-focused, you need to identify and dictate who can access what, how and when they can, from where, and for which purpose. This goes for every user, role, device, and network, as any of these could be used to access information without authorization.<\/p>\n

Step Five: Monitoring and Enforcing Compliance<\/strong>
Finally, you\u2019ll want to actively monitor your network to identify any oversights or loopholes in your zero-trust implementation. This will allow you to make corrections that resolve security issues and potentially optimize your business network’s performance.<\/p>\n

Some Pieces of Advice from Kindervag<\/h2>\n

First and foremost, Kindervag reminds us all that security issues like ransomware and other attacks\u2014the kind that zero-trust actively helps mitigate\u2014are not prejudiced against any kind or size of business. As a result, everyone is a target, and the impacts of a cyberattack can easily have severe real-world repercussions in our highly digitized society\u2026 and not always the kind you might expect.\u00a0<\/p>\n

Kindervag refers to a ransomware attack targeting a Swiss Alps dairy farmer and his milking machines. While the farmer could still manually collect milk from his livestock, he couldn\u2019t access the telemetric health data that may have prevented one of his cows from dying.<\/p>\n

Emotional losses from losing an animal aside, that\u2019s potentially a few hundred dollars of profit each year, just gone.<\/p>\n

Kindervag also points out that many large businesses are still about as prepared as this farmer was to deal with ransomware, even though computer systems and their processes directly impact a modern business\u2019 success. Therefore, according to Kindervag, the most intelligent and cost-effective approach is to be proactive in fighting cybersecurity threats.<\/p>\n

We Agree, and We Can Help<\/h3>\n

If you\u2019d like advice and assistance in keeping your business secure and productive in the face of modern cybersecurity issues, call Coleman Technologies at (604) 513-9428 to find out what needs to be done to implement a zero-trust approach.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Businesses of every size need to prioritize their security. This fact has not changed and will not change anytime soon. What has changed, however, are the recommended ways to approach this security. Today, we wanted to review the history of today\u2019s predominant cybersecurity advice and explore how the zero-trust security model applies. Meet John Kindervag, […]<\/p>\n","protected":false},"author":16,"featured_media":10637,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[32,51,31],"tags":[],"class_list":["post-11280","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-practices","category-innovation","category-security"],"_links":{"self":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11280"}],"version-history":[{"count":1,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11280\/revisions"}],"predecessor-version":[{"id":12338,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11280\/revisions\/12338"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/media\/10637"}],"wp:attachment":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}