Zero-Trust Panel Discussion Highlights

1
@solarwinds
Zero-Trust Panel Discussion
Government and Education Webinar

2
@solarwinds
Speaker Introductions
© 2021 SolarWinds Worldwide, LLC. All rights reserved.
Tim Brown
CISO and VP, Security
timothy.brown@solarwinds.com
Brandon Shopp
Group Vice President – Product
brandon.shopp@solarwinds.com
Thomas LaRock
Head Geek
thomas.larock@solarwinds.com

3
@solarwinds
Agenda
• Introduction to zero trust
• Best practices and essential
elements
• NIST zero-trust architecture
• Q&A
• SolarWinds overview
• Reference resources

4
@solarwinds
Introduction to Zero Trust

5
@solarwinds
Zero trust is a security model
based on the principle of maintaining
strict access controls and not trusting
anyone by default, even those already
inside the network perimeter.

6
@solarwinds
Considerations for Zero-Trust Security
What to think about
Perimeter security offers no
protection
• Your users now access sensitive
resources, bypassing any
perimeter or network controls
Compliance and visibility
• The need for oversight and
visibility—into who is accessing
which resources, when, and
how—is key to compliance

7
@solarwinds
Sources of Threats

8
@solarwinds
The Biggest Threats
“2019 Insider Threat Report” Verizon. https://enterprise.verizon.com/resources/reports/insider-threat-report.pdf (Published 2018, Accessed March 2019).

9
@solarwinds
Insider Threat Details
“2019 Insider Threat Report” Verizon. https://enterprise.verizon.com/resources/reports/insider-threat-report.pdf (Published 2018, Accessed March 2019).

10
@solarwinds
Laying the Foundation
for Zero Trust

11
@solarwinds
Laying the Foundation for Zero Trust
How you can evaluate your organization and determine which tools can help build a better zero-trust architecture
ASSESS RISK
MANAGE RISK
CONTAIN RISK
• Define where your
sensitive data is located
• Define who should
access what
Define access rights, taking into account:
• Identities/profiles
• Type of resource being accessed
• Level of access privilege
Detect, monitor, and respond:
• Detect unusual security events
• Respond - Block, allow
• Monitor - Report and adapt
policies
1
2
3

12
@solarwinds
Best Practices and
Essential Elements

13
@solarwinds
NIST Zero-Trust
Architecture

14
@solarwinds
NIST Zero-Trust Architecture
“NIST Special Publication 800-207 Zero Trust Architecture. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf (Published August 2020, Accessed June 2021).

15
@solarwinds
Raising Defenses

16
@solarwinds
What Should Organizations Do to Raise Their Defenses?
Effectiveness of tools to foster security
https://www.solarwinds.com/resources/survey/solarwinds-public-sector-cybersecurity-survey-report-2020

17
@solarwinds
Q&A
Call government or education
sales:
877.946.3751
Contact federal sales:
federalsales@solarwinds.com
Contact state and local
government sales:
governmentsales@solarwinds.com
Contact education sales:
educationsales@solarwinds.com

18
@solarwinds
SolarWinds Overview

19
@solarwinds
SolarWinds at a Glance
1. IDC defined Network Management Software functional market, IDC’s Worldwide Semiannual Software Tracker, October 15, 2020.
2. Gartner, Market Share Analysis: ITOM: Performance Analysis Software, Worldwide, 2019. June 17, 2020. (AIOps/ITIM/Other Monitoring Tools Software Market). SolarWinds term, Systems Management, refers to the AIOps/ITIM/Other Monitoring
Tools Software Market Taxonomy referenced in the Gartner report. All statements in this report attributable to Gartner represent SolarWinds interpretation of data, research opinion, or viewpoints published as part of a syndicated subscription service
by Gartner, Inc., and have not been reviewed by Gartner. Each Gartner publication speaks as of its original publication date (and not as of the date of this presentation). The opinions expressed in Gartner publications are not representations of fact
and are subject to change without notice.
3. Customers are defined as individuals or entities that have an active subscription for our subscription products or that have purchased one or more of our perpetual license products since our inception under a unique customer identification number.
We may have multiple purchasers of our products within a single organization, each of which may be assigned a unique customer identification number and deemed a separate customer.
#1
in network
management1
320,000+
customers in 190
countries3
60+
IT management
products
22,000+ MSPs serving
450,000+ organizations
Every branch of the DoD and
nearly every civilian and
intelligence agency
150,000+ registered members of THWACK®, our global IT community
Founded in 1999
More than 3,200
employees globally
Austin, TX, headquarters
Reston, VA, government office
30+ offices globally
Leader
in remote monitoring and
management
#3
in systems
management2
Growing security
portfolio
499 of the
Fortune 500®

20
@solarwinds
SolarWinds ITOM Solution Overview
IT operations management. Simplified.
IT Ops
On-Premises Public Cloud
Service Management
IT
Security
Database Performance Management
Network Management
Infrastructure Management
IT Security
DevOps
Private Cloud
Wherever IT
sits
All things IT Whoever
manages IT
performance
Application Performance Management

21
@solarwinds
Resources

22
@solarwinds
Recent SolarWinds Security Blogs
• Blog: Our Support for Private-Public Partnerships in Combatting Cyberthreats
orangematter.solarwinds.com/2021/05/13/our-support-for-private-public-partnerships-in-combatting-cyberthreats/
• Blog: An Investigative Update of the Cyberattack
orangematter.solarwinds.com/2021/05/07/an-investigative-update-of-the-cyberattack/
• Blog: Continuing Our Journey to Becoming Secure by Design
orangematter.solarwinds.com/2021/02/03/continuing-our-journey-to-becoming-secure-by-design/
• Blog: Findings From Our Ongoing Investigations
orangematter.solarwinds.com/2021/02/03/findings-from-our-ongoing-investigations/
• Blog: New Findings From Our Investigation of Sunburst
orangematter.solarwinds.com/2021/01/11/new-findings-from-our-investigation-of-sunburst/
• Blog: Our Plan for a Safer SolarWinds and Customer Community
orangematter.solarwinds.com/2021/01/07/our-plan-for-a-safer-solarwinds-and-customer-community/

23
@solarwinds
Zero Trust Resources
• Blog: 3 Foundational Elements of Zero Trust You Can’t Do Without
• Blog: When “Trust but Verify” Isn’t Enough: Life in a Zero-Trust World
• SolarWinds Lab™: Building a Zero-Trust Model With SolarWinds
Security Tools
• Blog: 3 Reasons You Should Start With Access Rights Management
Over Access Management

24
@solarwinds
Contact Us
• Call government sales: 877.946.3751
• Email government sales: Federal federalsales@solarwinds.com
State and local governmentsales@solarwinds.com
Education educationsales@solarwinds.com
• Visit our THWACK government group: http://thwack.com/government
• Download a free trial: http://www.solarwinds.com/downloads/
• Visit our government website: http://www.solarwinds.com/government
• Visit our education website: https://www.solarwinds.com/solutions/education-it-solutions
• Follow us on LinkedIn®: https://www.linkedin.com/company/solarwinds-government
Let us know how we can help you

25
@solarwinds
THANK
YOU

26
@solarwinds
The SolarWinds, SolarWinds & Design, Orion, and THWACK
trademarks are the exclusive property of SolarWinds Worldwide,
LLC or its affiliates, are registered with the U.S. Patent and
Trademark Office, and may be registered or pending registration
in other countries. All other SolarWinds trademarks, service
marks, and logos may be common law marks or are registered or
pending registration. All other trademarks mentioned herein are
used for identification purposes only and are trademarks of (and
may be registered trademarks) of their respective companies.

Zero-Trust Panel Discussion Highlights

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Zero-Trust Panel Discussion Highlights

Similar to Zero-Trust Panel Discussion Highlights (20)

More from SolarWinds

More from SolarWinds (9)

Recently uploaded

Recently uploaded (20)

Zero-Trust Panel Discussion Highlights