With the rapidly changing threat landscape and the need for modern network infrastructure, Kopenhagen Konsulting was brought in to help a client formalize their multi-year Zero Trust journey. The goal was to provide a clear vision for this journey and outline tangible initiatives for long-term support.
This initiative was crucial to gain management buy-in and secure funding to kickstart the journey.
Kopenhagen Konsulting led the creation of a comprehensive Zero Trust vision and strategy over three months. This involved forming a 13-person team and a governance structure reporting directly to the CISO. Key internal stakeholders from enterprise architecture, security operations, and IT were involved in shaping the strategy and architecture.
The Zero Trust vision provided the conceptual foundation for an ideal security and user perspective. A Zero Trust strategy was created to turn this vision into actionable elements, based on best practices and tailored to the company's needs.
They operationalized a Zero Trust maturity model to measure progress, track priorities, and guide the CISO and Zero Trust team. Core elements like "Identities" and "Devices" were integrated with the Identity and Access Management domain to ensure a unified architecture. This included DNS optimization, Zero Trust Network Access, and MFA roll-outs.
The client achieved: