Threatline

Gartner Predicts 10% of Large Enterprises Will Have a Mature and Measurable Zero-Trust Program in Place by 2026

Gartner, Inc. predicts thatby 2026, 10% of large enterprises will have a mature and measurable zero-trust program in place, up from less than 1% today. Gartner defines zero trust as a security paradigm that explicitly identifies users and devices and grants them just the right amount of access so the business can operate with minimal friction while risks are reduced. "Many organizations established their infrastructure with implicit rather than explicit trust models to ease access and operations for workers and workloads. Attackers abuse this implicit trust in infrastructure to establish malware and then move laterally to achieve their objectives," said John Watts, VP Analyst at Gartner. "However, CISOs and risk managementleaders should not assume that zero trust will eliminate cyberthreats. Rather, zero trust reduces risk and limits impacts of an attack." Gartner analysts predict thatthrough 2026, more than half of cyberattacks will be aimed at areas that zero- trust controls don't cover and cannot mitigate. CISOs and risk management leaders must also run a continuous threat exposure management program to better inventory and optimize their exposure to threats beyond the scope of ZTA. Gartner clients can learn more in "Predicts 2023: Zero Trust Moves Past Marketing Hype Into Reality." Gartner analysts present the latest research and advice for security and risk management leaders at the Gartner Security & Risk Management Summits 2023, taking place February 13-14 in India, February 27-28 in Dubai, June 5-7 in National Harbor, MD, March 28-29 in Sydney, July 26-28 in Tokyo and September 26-28 in London.