Course Objective & Scope
Cloud adoption, remote work and heavy service-to-service API traffic have rendered perimeter-based network security insufficient. Grounded in NIST SP 800-207 and the CISA Zero Trust Maturity Model, this course examines identity, device posture, micro-segmentation, ZTNA and data-layer policies as an integrated architecture.
Participants map Policy Engine, Policy Administrator and Policy Enforcement Point components onto a reference enterprise environment and produce a phased migration roadmap from legacy VPNs and flat networks to Zero Trust.
Who Should Attend?
- Security architects and enterprise infrastructure architects
- Network, cloud and identity management (IAM) engineers
- Information security managers and technical team leads
- Prerequisite: familiarity with enterprise networking, directory services (AD/Entra ID) and cloud infrastructure
Key Takeaways
- Position NIST SP 800-207 components (PDP, PEP) within an enterprise architecture
- Design conditional access policies driven by identity and device posture
- Architect micro-segmentation and ZTNA controls that prevent lateral movement
- Use mTLS and workload identity for service-to-service communication
- Assess current state against the CISA maturity model and build a migration roadmap
Curriculum
Zero Trust Principles and Reference Architectures
- NIST SP 800-207 logical components: Policy Engine, PDP and PEP
- CISA Zero Trust Maturity Model pillars and maturity stages
Identity and Device Posture
- Phishing-resistant MFA (FIDO2/Passkeys), conditional access and continuous session evaluation
- Device compliance checks via UEM/EDR signals and JIT/JEA privileged access
Network Micro-Segmentation and ZTNA
- Transitioning from legacy VPN to ZTNA and SASE/SSE architectures
- Micro-segmentation across data centres, Kubernetes and cloud environments
Application, Workload and Data-Layer Controls
- Workload authentication with service mesh, mTLS and SPIFFE/SPIRE
- Data-centric protection through classification, DLP and encryption
Visibility, Telemetry and Migration Roadmap
- Continuous monitoring, risk scoring and automated policy enforcement
- Internal Zero Trust gap analysis and phased rollout planning
Other Courses in This Category
-
OWASP Top 10, threat modeling, secure coding, SAST/DAST/SCA integration and Secure SDLC controls for software and AppSec teams aiming to find and fix vulnerabilities before production.
- Live Course
- 5 modules
-
OWASP API Security Top 10, BOLA/BFLA, OAuth 2.1 and JWT security, GraphQL/gRPC attack surfaces and API gateway controls for engineering and security teams protecting enterprise APIs.
- Live Course
- 5 modules
-
Open-source dependency risks, SBOMs (CycloneDX/SPDX), the SLSA framework, artifact signing with Sigstore/Cosign and CI/CD hardening for DevSecOps and platform teams securing the software supply chain.
- Live Course
- 5 modules
-
MITRE ATT&CK-based adversary emulation, detection engineering and collaborative Purple Team exercises for offensive and defensive security teams closing visibility and detection gaps together.
- Live Course
- 5 modules
-
The NIST SP 800-61 lifecycle, incident triage, DFIR evidence collection, containment and root-cause analysis for security and IT teams managing cyber incidents under pressure.
- Live Course
- 5 modules
-
Log architecture, normalization, correlation rules, MITRE ATT&CK-based detection, alert triage and threat hunting for SOC analysts and security engineers reducing alert fatigue and catching real threats.
- Live Course
- 5 modules
Get in touch
