News

Identity at the core of Zero Trust: becoming cyber secure in education

 

In an age marked by an unprecedented surge in cyberthreats and data breaches, the importance of cybersecurity has reached new heights. Organisations worldwide are grappling with a mounting tide of cybercrime, with estimates from Cybersecurity Ventures projecting that cybercrime would cost the world a staggering $8 trillion in 2023; a number expected to soar to $10.5 trillion by 2025.

It’s a daunting reality that no one can afford to ignore, regardless of their geographic location. The fact that businesses in Africa are not immune to this cybercrime deluge was a point under discussion at a recent joint Higher Education Information Technology South Africa (HEITSA) event with Datacentrix, a leading hybrid ICT systems integrator and managed services provider.

The organisation looked at the controls, processes, and technologies that African businesses can put in place to help mitigate this risk as we move into a new era, in particular exploring the Zero Trust model as a transformative approach.

The evolution of Zero Trust

“Zero Trust has evolved into a comprehensive framework, with identity as its central pillar,” explained Francois Jacobs, Business Unit Manager at Datacentrix. “That is, knowing who someone is, where they are coming from, and how they are attempting to access data. Within the context of higher education and other sectors, the management of identities can present unique challenges and opportunities.”

The concept of Zero Trust originated in 2004 when the notion of ‘access control’ was introduced. This initial approach focused on device health and the origins of network traffic to segregate and grant access. However, it was a very network-focused approach, he stated. “It wasn’t until around 2010 that the model expanded to encompass identity and data, moving beyond the network as the sole vector of trust.”

By 2014, the first real vendor solutions emerged, encompassing the core pillars of Zero Trust: identity, network and device, and data. Major companies like Google and Microsoft played pivotal roles in shaping the Zero Trust landscape. In the late 2020s, assessment models and practical guidelines – such as ZTX, the Zero Trust security framework from Forrester – further fuelled Zero Trust adoption.

“These steps provided the guidance that businesses needed on how to practically implement Zero Trust, as well as empowering the vendors in building the tools for organisations to use,” Jacobs continued, adding that the last big push for Zero Trust adoption was during the COVID period, driven by remote and hybrid working.

Zero Trust, as we know it today

According to Jacobs, many of these key Zero Trust principles have their foundations in identity. “However, in today’s context, considering the concept of assumed breach and trusting no-one until they have verified themselves in some authoritative way, it must be extended to include other important areas.”

Thus, Zero Trust, as we know it today, revolves around five core pillars:

· Identity: Knowing an individual’s identity beyond a shadow of a doubt is the first pillar. This encompasses authentication and authorisation practices that apply token-based or multi-factor authentication methods.

· Telemetry and analysis: It is crucial to understand where an individual is coming from, the type of device they’re using, the data they are trying to access, and the workload they are attempting to access. This provides the foundation for trust decisions.

· Data access: Zero Trust requires a comprehensive view of who is trying to access data and under what conditions. This ensures that data remains protected against unauthorised access.

· Automation and orchestration: These technologies enable real-time or near-real-time trust decisions and actions, ensuring that the security posture remains robust, and adequate action can be taken when needed.

· Governance: Maintaining detailed records of who had access to what resources, and for what reasons, is essential for Zero Trust.

Challenges and opportunities in higher education

Implementing Zero Trust in higher education can present unique challenges, but can also be fruitful in many ways, said Jacobs. “Firstly, the scale and diversity of identities within higher education can be complex when compared to enterprises in other sectors, where you would typically find full-time employees and contractors, as well as long-term vendors and so on. Higher education institutions have a diverse array of identities, including students, faculty, administrators, and even visiting professors and examiners. Managing the lifecycles and verifying the identities of individuals that don’t exist in strong, authoritative sources of identity can be a significant challenge.”

Adoption resistance with regards to new technologies can be another hurdle, particularly in a setting where connectivity issues and remote learning can be commonplace.

“We also see, quite often, that legacy platforms are still in use within these environments, which may not support these newer methods of authentication and analysis and identity management systems, or the required telemetry to support the Zero Trust framework.”

On the flip side, the shift towards cloud-based learning platforms and hybrid education has provided a unique opportunity for the adoption of Zero Trust within higher education, as it allows for better validation and verification of users, like those visiting professors, who fall outside the network perimeter.

The landscape of cybersecurity is rapidly evolving, and Zero Trust has emerged as a powerful model to protect against the rising tide of cyber threats. It places identity at its core, necessitating robust identity verification, strong authentication, access controls, and governance practices. In higher education, where diverse identities and hybrid learning have become the norm, the adoption of Zero Trust presents both challenges and opportunities.

The fundamental shift in perspective is clear, added Jacobs, namely that trust can no longer rely solely on network parameters or application-centric thinking. “The Zero Trust framework provides a comprehensive approach that empowers organisations, including those in higher education, to manage access through a lens of trust that extends to identity, context, and data.”

Leave a Comment

Your email address will not be published.

You may also like

Business Economy

Gwandu Urges African Countries to Unite for 600MHz Mobile Spectrum Allocations

post-image

Dr. Bashir Gwandu, former Acting Executive Vice Chairman and CEO, Nigerian Communications Commission (NCC) and former EVC/CEO, National Agency for Science and Engineering Infrastructure (NASENI), has urged African countries to unite and work  together to secure 600 megahertz (MHz) band mobile spectrum allocations.

 The independent telecom expert stated this at the just concluded 9th Sub-Sahara Spectrum Management Conference 2024, held in Nairobi, Kenya on 6-7 November, organised by Forum Global on the third theme: “From WRC-23 to WRC-27- Emerging Landscapes  & Technologies and the Path Ahead.”

Dr. Gwandu who held various chairmanship positions at the both the ITU and Commonwealth including the ITU Radiocommunications Advisory Group (the RAG), The Joint Task Group, and Commonwealth ITU Group (CIG), made the call during his opening remarks on the 600MHz spectrum discussions.

While making a presentation on the session: “The shape of Post-WRC spectrum ecosystems”, he called for…

Read More
Announcements Business Featured International Opinion Society

Moppets Baby Food Achieves HACCP Certification, Setting New Standards in Food Safety

post-image

 

In a significant milestone for Moppets Baby Food, Engr. Roberta Edu, CEO of the popular children’s food brand, recently announced their achievement of HACCP certification—a globally recognized food safety standard. Moppets, a subsidiary of Frills by Roberta, achieved this certification after rigorous assessments and audits, underscoring their commitment to quality and safety.

Edu shared the journey behind this accomplishment: “If you follow our Moppet Foods story closely, one thing you’re going to take away is how daring we’ve been over the years and how committed we are to excellence.” She recalled that upon learning the brand needed HACCP certification to supply to a specific NGO, the challenge initially appeared daunting. However, her determination turned that challenge into a goal, setting the company on a path toward stringent safety compliance.

 

Moppet Foods undertook comprehensive audits…

Read More
Business Economy Government Society Software

First Lady Empowers Women ICT Beneficiaries with Laptops and Financial Support

post-image

 

In a significant boost for women in technology, beneficiaries of the Women ICT Training Empowerment Programme, organized in collaboration with the Renewed Hope Initiative, received brand new laptops and financial support from Her Excellency, Senator Oluremi Tinubu, CON, First Lady of the Federal Republic of Nigeria.

This initiative aligns with the National Information Technology Development Agency’s (NITDA) Digital4All (#DL4ALL) program, a strategic part of Nigeria’s broader mission to foster digital literacy and skill acquisition across the nation. NITDA’s ambitious Digital4All plan is geared toward achieving 70% digital literacy by 2027, a goal expected to drive Nigeria toward a more inclusive and digitally empowered society.

Her Excellency’s support underscores the federal government’s commitment to empowering women with the necessary tools and resources to thrive in an increasingly digital world. As beneficiaries received their laptops and cheques, this initiative highlighted the transformative potential of digital skills in enhancing economic opportunity and self-sufficiency among…

Read More
Business Economy

Dr. Bosun Tijani Leads Stakeholder Engagement in Lagos on Digital Economy & e-Governance Bill

post-image

Dr. Bosun Tijani, Nigeria’s Minister of Communications, Innovation, and Digital Economy, today led a significant stakeholder engagement on the proposed Digital Economy and e-Governance Bill. Held in Lagos, this meeting is part of an extensive consultation initiative that spans Nigeria’s 36 states and the Federal Capital Territory (FCT), aimed at shaping legislation to catalyze the growth of Nigeria’s digital economy.

“Today in Lagos, we held a stakeholder engagement on the Digital Economy & e-Governance Bill as part of our wide-ranging consultation across the 36 states and FCT of Nigeria,” stated Dr. Tijani. “With no current overarching law to back the digital economy in Nigeria, we are keen to collectively craft a piece of legislation that can help us accelerate the…

Read More
Business International News

Vertiv Concludes Successful AI Solutions Innovation Roadshow in Dubai

post-image
The event showcases latest AI-ready infrastructure solutions, including key innovations in power and cooling
 (NYSE: VRT), a global leader in critical digital infrastructure and continuity solutions, recently concluded its highly anticipated AI Solutions Innovation Roadshow in Dubai, UAE.
Held at Crowne Plaza – Dubai Marina, the event was part of a global series aimed at educating and equipping customers and consultants with essential expertise for deploying high-performance computing (HPC) and artificial intelligence (AI) infrastructure. During the roadshow, Vertiv experts introduced the eight infrastructure imperatives to enable AI, shared insights on key challenges and opportunities and provided participants with a deep understanding of the latest innovations supporting HPC infrastructure, as well as the impact on data center power and cooling systems.
Tassos Peppas, Regional Director for Middle East, Turkey and Central Asia (METCA) region at Vertiv, said: “Dubai stands at the forefront of high-performance computing and AI innovation, setting a…

Read More
Business News Security Society Technology Technology Trends

Airtel Nigeria Graduates First Cohort of Groundbreaking Open Talent Economy Program

post-image

 

Airtel Nigeria has marked a significant milestone with the graduation of the first cohort from its Open Talent Economy (OTE) program, an ambitious initiative aimed at preparing undergraduates for the evolving demands of the modern workforce.

The pioneering program welcomed 14 undergraduates from top institutions, including Pan Atlantic University, Lead City University, Federal University of Technology Akure, Oduduwa University, and the University of California. Over a period of 120 days, these young talents received hands-on field training and contributed to live projects, gaining direct experience in real-world business environments.

Dubbed “Airternship,” the OTE program serves as a mutual engagement platform, allowing Airtel Nigeria to connect with the ambitions and perspectives of the youth while equipping them with the skills needed to thrive professionally. The program reflects Airtel Nigeria’s commitment to nurturing future leaders by providing practical experiences that go beyond the traditional classroom setting.

“Airtel Nigeria’s mission is to give young talents…

Read More
Announcements Business Culture Economy Education News Security Society

Nigeria Data Protection Commission Partners with Social Media Influencer Enioluwa Adeoluwa to Boost Privacy Awareness

post-image

 

The Nigeria Data Protection Commission (NDPC) has taken a significant step in advancing data protection awareness in Nigeria by signing a Memorandum of Understanding (MoU) with popular social media influencer, Enioluwa Adeoluwa. This collaboration aims to reach Nigeria’s vast social media user base and promote awareness about data privacy rights and responsibilities.

During the signing, the National Commissioner and CEO of the NDPC, Dr. Vincent Olatunji, emphasized the scale of Nigeria’s social media engagement, noting that an estimated 40 million Nigerians interact online daily. He explained that the partnership with Enioluwa is designed to educate individuals about their privacy rights while reminding data controllers and processors of their obligations under Nigeria’s data protection regulations. “With Enioluwa’s extensive social media following, this partnership is poised to amplify the Commission’s message, expanding public understanding of our mandate and advancing our roadmap for awareness creation,” Dr. Olatunji stated.

Enioluwa expressed enthusiasm for the collaboration,…

Read More
Business Economy International News Society Software Technology Technology Trends Telecoms

Digital sovereignty: the key to data control, security, and independence

post-image

By Alex Galbraith, CTO, Cloud Services at SoftwareOne

Working with data can be a blessing and a curse. While it is the definitive factor that empowers digital transformation efforts, aids decision-making and stores an organisation’s most valuable and confidential assets, dealing with data is often a business’ greatest challenge. As the world’s dependence on data grows and the threat of cyberattacks increases, businesses need solutions that will them manage, govern, and safeguard their data more efficiently – and this is where digital sovereignty comes in.

Digital sovereignty helps people, businesses, and countries to stay in control of their digital assets and data. It goes beyond ownership of data – it means having full authority over everything from where and how data is stored and processed to fostering independence in technological development to enforcing local laws and regulations within the digital space. Ultimately, it offers businesses increased control, security, and…

Read More