In order to realize a zero trust network without any gaps, we will introduce practical implementation methods for the four target areas, using representative solution examples. [Four areas that should be targeted for zero trust]▶▶1. Zero trust for employees - the latest method to achieve secure, high-speed access from anywhere you work, 2. Zero trust for affiliated companies - the latest method to achieve appropriate collaboration with affiliated companies and unmanaged devices, 3. Zero trust for factories - the latest method to dynamically control communication for IoT/OT devices in factories based on risk, 4. Zero trust for DC/IaaS - the latest method of microsegmentation to control servers at the host level.

In recent years, with the increase in network intrusion cyber attacks and reports of damage such as ransomware and information leaks, many Japanese companies are rapidly moving towards zero trust. When implementing a zero trust network, it is often thought of as a binary choice: should it be configured with a multi-vendor system that combines many vendors? Or should it be configured with a platform from a single major security vendor? In this session, we will introduce a new approach to configuring zero trust on a multi-platform as a third new option that balances security and convenience, with concrete examples.

Over the course of four days, we will introduce the implementation methods and general implementation steps/roadmap for each category, based on the five components/categories that make a Zero Trust network a reality. We will also introduce the latest solution trends and future trends that we are currently investigating. [1. Identity “Where do I start? Key points for introducing “ID security” that can be understood from the overall picture! ～Future-oriented ID security that is necessary in the cloud era～] [2. Devices “The necessity of cyber hygiene and the forefront of IT asset management trends - Real solutions for failure-free asset management in the zero-trace era”] [ 3. Network “The forefront of SASE evolving as a “network” solution - What a corporate network should be when considering the future use of SASE”] [4. Data “The forefront of data protection to detect and prevent information leaks” From DLP implementation techniques to the latest DSPM''] [5. Workload ``The latest micro-segmentation implementation techniques ~ Ransomware countermeasures move from detection to containment'']

Zero trust security is currently being adopted by many companies, but don't you think it has nothing to do with your company? In particular, many companies have the misconception that zero trust is premature because the network is centered on a closed network that has not yet actively used the cloud and has not promoted telework. In this session, we will introduce various misunderstandings of Japanese companies related to such zero trust, and present the latest solutions and prescriptions for them. If you think that zero trust is not relevant to your company yet, please join us.

An increasing number of companies are starting with the introduction of IDaaS toward Zero Trust. In fact, by advancing IDaaS in advance, it is said that there are many benefits such as improving security and being able to smoothly introduce and deploy subsequent solutions. On the other hand, when considering the introduction of IDaaS, it is necessary to take into consideration the company's IT environment, especially the current ID environment and the future ID management operation required in the cloud era. If you start without an inventory of the current situation and future prospects in advance, there are some cases where the introduction project takes longer than expected, or the introduction itself fails. In this session, we will introduce the actual situation of the increasingly complex ID environment and the points and issues that should be focused on first when considering the introduction based on use cases.

As the ID environment becomes more complex, the operational load increases, and the need for centralized management increases, an increasing number of companies are considering the introduction of ID-related solutions such as IAM/IGA/PAM. However, because the scope of its introduction is wide and there are many departments involved, you may find it difficult to construct an overall picture of the ID environment that is optimal for your company. In addition, there are many cases where solutions to various ID-related issues are considered individually, and the effectiveness of each solution is not maximized. In this session, we will explain Macnica 's overall view of ID management, the role of each ID-related solution such as IAM/IGA/PAM, and the effects of using it in combination with a technical perspective.

Strengthening network security and creating a comfortable communication environment through the introduction of SASE has become an important issue for global companies to consider. However, the reality is that there are many challenges in implementing it. In this seminar, we will introduce the points that global companies should keep in mind before introducing SASE and the experiences that they actually had a hard time with. In particular, the background of recent SASE considerations, points to note at the planning stage before introducing SASE, examination of cost-effectiveness, communication with group companies and overseas bases, import/export issues after introduction, creation of operational systems, etc. , we will focus on the actual situation that should be considered in advance in each phase. We hope that this seminar will help you grasp the key to success in introducing SASE.

“Zero Trust” has gone from being a buzzword to a well-established security mindset. On the other hand, although he started running toward the implementation of "Zero Trust", he said that he didn't know what to actually do at his company and how to organize it, while many vendors were selling zero trust solutions. I listen to your voice. Thorough explanation of such issues divided into 4 categories! You can watch only one category that you are interested in. 1. ID version Thorough explanation of ID environment management using products in the three areas of IAM/IGA/PAM 2. SASE/SSE version Points to consider when selecting SASE/SSE that meet your company's issues and requirements Thorough explanation 3. Factory security edition In anticipation of the future zero trust implementation, a thorough explanation of measures that should be prioritized now and how to implement them 4. XDR/SIEM edition XDR A thorough explanation of the basic concept, expected effects, and the positioning of SIEM in XDR

Many companies are working on zero trust, but in reality, there are some cases where the project is not progressing well. This time, I will touch on five specific cases where Zero Trust projects do not go well in Japanese companies, and mention the three points necessary for the project to succeed.・[5 Examples] Why Zero Trust Projects Are Stuck ・Three Points for Successful Zero Trust

The ID environment is one of the most important aspects of creating an environment for zero trust, but what kind of environment is the best? We will introduce the concrete construction model.・The background behind the demand for zero trust ・Three reasons why IDs are important ・Can IDaaS cover everything? What are the benefits of considering and introducing the ideal form of "IGA", "PAM" and ID management that should be noted?

Thorough explanation of "specific cooperation" and "implementation procedure" of EDR / IDaaS / SASE / SSE configured in "best of breed type"!・What is the 3-point defense that realizes zero trust?・Characteristics and superiority of the solutions of the three companies ・Image of the implementation of the collaboration between the three companies ・Demonstration of the collaboration between the three companies

I believe that many companies are considering introducing IDaaS in order to realize zero trust and improve the cloud usage environment. On the other hand, even if it is called IDaaS, the functions, security, applicable applications, etc. differ greatly depending on the product, so there are some points to note when selecting the IDaaS that is suitable for your company. In this session, we will make use of our experience in handling federation products since 2012. ?” and other criteria for selecting IDaaS.

I think there are many people who imagine ID = IDaaS in Zero Trust. Enabling access "for the right people, resources, at the right time, and for the right reasons" is essential, but essential, requires a comprehensive understanding of identity in general. In this session, we will explain the issues related to ID, which is the key to realizing Zero Trust, the division of ID-related solutions, and how ID governance (IGA) can solve these issues. We will introduce how to reduce the operational burden and achieve a higher level of security by visualizing the IDs that exist on a complex and wide-ranging corporate system, understanding risks, and automating the granting of minimum access rights.