EP106 Beyond BeyondProd - How Do You Zero Trust Your Workloads?

Guest:

• Anoosh Saboori, former Product Manager at Google Cloud

Topics:

• We had zero trust episodes before and definitions vary! When we say zero trust, what do we mean?
  • What about zero trust for workloads in production? When you say "workload," what do you mean?
• What is BeyondProd, for those that are unfamiliar with it? And how is this different from BeyondCorp?
• How has BeyondProd actually been implemented at Google?
• What threats does it help with? Is this real threats or compliance?
• Why is now a good time to be thinking about zero trust for production systems?
• Companies have many security tools deployed, including microsegmentation and firewalls, how does this toolset fit? Does it replace anything they have deployed?

Resources:

• BeyondProd papers
• "Zero Trust: Fast Forward from 2010 to 2021" (ep8)
• "Gathering Data for Zero Trust" (ep4)
• "Google Workspace Security: from Threats to Zero Trust" (ep99)
• "Zero Trust: So Easy Even a Government Can Do It?" (ep59)
• "Is This Binary Legit? How Google Uses Binary Authorization and Code Provenance" (ep66)