Zero Trust Architecture: best practices for managing information security risks.

Abstract

This article discusses the ZTA model, whose approach consists of zero trust, regarding information security risk management. The bibliographic review allows the dissemination of the concept, and a detailed understanding of the principles and composition of the Zero Trust Architecture. Accompanied by the analysis of good practices currently found, the advantages and benefits of its implementation are highlighted, and difficulties are still presented, since the acceptance of a new paradigm by managers, to the mobilization for the introduction of a new culture and strategy, without neglecting the investment necessary to put this model into practice. At the end of the work, considerations about future challenges and some suggestions, after all the model does not close in itself, it is adapted and adaptable to the needs and particularities of each corporation, in terms of access to data, requiring continuous improvement of its structure and processes.