In 2014, Google published “BeyondCorp: A New Approach to Enterprise Security” detailing their implementation of Zero Trust networks and the industry was aflutter. Despite the existence of reference materials and mature supporting technologies, large scale real-world implementations have been slow to appear. Like all security, Zero Trust is a journey not a destination. Given that even the very best corporate IT and InfoSec departments may lack the budget, infrastructure, and/or technical expertise available to the world’s largest Internet companies, what factors-- both cultural and technical-- influence an organisation’s decision to begin that journey? How do they assess their current infrastructure for fitness to support it? This talk will help answer these questions and more.Learning Outcomes:Understand the fundamentals of Zero Trust networksIdentify the components of the IT and security infrastructure that form the foundation for Zero TrustEvaluate whether Zero Trust fits the corporate culture and risk appetiteReview and utilize relevant standards and reference documentsBuild a roadmap for Zero Trust implementation