Every person, device and connection is verified before it reaches the systems.
Being inside the network is no longer enough to trust an access. We design a model in which every request is verified, with a phased plan for the environment the company already has.
We see what already exists and what is missing, and leave a plan in priority order.
The architecture fits the current infrastructure and says where to start.
Access with a strong identity, more than one proof, and control of privileged accounts.
The network is divided so an attacker cannot move freely from system to system.