Illumio, Inc., a specialist in Zero Trust Segmentation, released new findings that explore the state of Zero Trust in the United Kingdom. The research shows that nearly all (98%) of UK business leaders and IT decision-makers either plan to or have already started implementing Zero Trust strategies at their organisations.
The report also revealed the challenges organisations face when implementing Zero Trust architecture. Respondents cited employee perception and resistance to change as the primary barriers to activating their Zero Trust plans. Notably, nearly a third (32%) of respondents expressed concern about employees thinking the company doesn’t trust them.
“This research makes one thing clear UK business leaders and IT professionals know how important Zero Trust strategies are in making their organisations resilient, particularly as ransomware wreaks havoc across every industry,” says Raghu Nandakumara, EMEA field CTO, Illumio.
“It’s especially encouraging to see over 90% of organisations prioritising segmentation, since this is an essential control in keeping critical assets safe from attacks. Despite some technological and organisational barriers, we all need to start, or continue, making incremental progress on our Zero Trust plans. It’s better to be slightly more secure tomorrow than to have the perfect plan on paper in two years.”
Why are UK organisations adopting zero trust strategies?
For organisations that have already adopted a Zero Trust approach, the top two reasons cited for implementation were either because it was a part of a strategy refresh on security infrastructure (48%), or to enable the business to improve its agility through digital transformation (47%).
Furthermore, 60% stated the greatest benefit from their Zero Trust approach was feeling more confident they had secured their critical data and reduced their organisation’s risk exposure (54%).
Barriers to implementing zero trust architecture
The research revealed the technological, operational, and cultural barriers that prevent organisations from adopting Zero Trust. The main technological barriers included legacy systems that couldn’t be upgraded (29%) and cost constraints (22%). Culturally within organisations, 33% of respondents said their business was resistant to change unless mandated by compliance regulations. As mentioned, 32% feared that their employees would think that they don’t trust them though it’s important to note that Zero Trust grants trust to users, devices, and applications once they are verified.
How organisations approach zero trust
Zero Trust is a strategy and philosophy, and no one technology can make an organisation achieve Zero Trust overnight. An essential pillar to any Zero Trust strategy is segmentation, and the vast majority of organisations (92%) are segmenting their networks in some way.
While a lot of respondents are using legacy approaches like virtual firewalls (52%) and network-based segmentation (49%), many said that they’re also taking a more modern, scalable approach and segmenting by application characteristics (32%), or implementing workload based micro-segmentation (32%).
Find the full research report here. For more information, join a webinar on September 29th at 10:00am BST. Register here.
Research methodology
The survey was conducted among 203 UK senior IT security decision makers, from companies with more than 250 employees. At an overall level, results are accurate to ± 6.9% at 95% confidence limits assuming a result of 50%. The interviews were conducted online by Sapio Research in June 2021.
Comment on this article below or via Twitter: @VanillaPlus OR @jcvplus
