Zero Privilege Architectures - Modern IT Security Approach

Explore a groundbreaking approach to IT security in this 30-minute conference talk by Thijs Ebbers and Diana Iordan from ING. Delve into the concept of Zero Privilege Architectures, challenging traditional "Least Privilege" and "Zero Trust" implementations. Learn how to develop a modern IT architecture suitable for today's challenges, based on desired state infrastructure, CI/CD, and Infra/Policy-as-code. Discover the role of Data Services, Events, Observability, and IAM in creating a secure operational environment. Gain insights into different architectural views for various stakeholders, including architects, developers, engineers, C-level managers, and CISO/auditors. Address common concerns and questions about implementation, scalability, and affordability. Understand how ING has successfully implemented this architecture and how it can be applied to different industries and organizations.

Zero Privilege Architectures - Thijs Ebbers & Diana Iordan, ING