IN RECENT times, cybersecurity has become a staple discussion topic in boardrooms. Ongoing geopolitical tensions and economic uncertainty have made the threat of cyberattacks even more pressing, with businesses of all sizes and across all industries feeling the heat. From the potential for a devastating ransomware attack to a data breach that could compromise sensitive consumer information, the risks are real and potentially catastrophic. Organisations are cognisant of the need for better cyber resilience and preparation. Merely reacting to an attack is no longer enough. Companies must proactively prepare for the inevitable in their approach to cybersecurity.

A cybersecurity approach that has gained the most traction in recent years is the concept of Zero Trust. The basic principle behind Zero Trust is simple: trust nothing; verify everything. The impetus for a modern Zero Trust architecture is that traditional perimeter-based cybersecurity models are insufficient in today’s digital landscape. Organisations must adopt a holistic approach to security based on verifying the identity and trustworthiness of all users, devices, and systems that access their networks and data.

Zero Trust has been on the radar of business leaders and board members for some time now. Cybersecurity and Internet firm Cloudflare’s “The journey to Zero Trust in Asia Pacific” study revealed that 85 per cent of organisations in Singapore are aware of Zero Trust. However, Zero Trust is no longer just an idea; it has become a mandate. With remote and hybrid work being encouraged and cyberattacks continuing to escalate, businesses realise they must change their cybersecurity approach. Such shifts in strategy can be challenging to implement. Cloudflare found that 65 per cent of firms have begun implementing Zero Trust methods and technologies. There is still plenty of room for the proliferation of Zero Trust here in Singapore.