<case>

Paving the Way for Zero Trust

Ambition

With the rapidly changing threat landscape and the need for modern network infrastructure, Kopenhagen Konsulting was brought in to help a client formalize their multi-year Zero Trust journey. The goal was to provide a clear vision for this journey and outline tangible initiatives for long-term support.

This initiative was crucial to gain management buy-in and secure funding to kickstart the journey.

Solution

Kopenhagen Konsulting led the creation of a comprehensive Zero Trust vision and strategy over three months. This involved forming a 13-person team and a governance structure reporting directly to the CISO. Key internal stakeholders from enterprise architecture, security operations, and IT were involved in shaping the strategy and architecture.

The Zero Trust vision provided the conceptual foundation for an ideal security and user perspective. A Zero Trust strategy was created to turn this vision into actionable elements, based on best practices and tailored to the company's needs.

They operationalized a Zero Trust maturity model to measure progress, track priorities, and guide the CISO and Zero Trust team. Core elements like "Identities" and "Devices" were integrated with the Identity and Access Management domain to ensure a unified architecture. This included DNS optimization, Zero Trust Network Access, and MFA roll-outs.

Outcome

The client achieved:

  • A ready-to-communicate strategy and work outline.
  • Approval and funding from management for the strategy.
  • A dedicated Zero Trust team to execute the strategy.
  • Continued support from Kopenhagen Konsulting to ensure the outlined work's success.