Episode 15 - Dr. Chase Cunningham - Dr. Zero Trust

In this episode of the Resilient Cyber Podcast, hosts Chris Hughes and Dr. Nikki Robinson interview Dr. Chase Cunningham, commonly known as "Dr. Zero Trust." Dr. Cunningham shares his journey from being a Navy diesel mechanic to becoming a prominent figure in cybersecurity, particularly in the field of Zero Trust architecture. He provides insights into the Zero Trust philosophy, emphasizing the importance of not trusting anything by default, whether it's within the internal infrastructure or external relationships. The conversation delves into the evolution of Zero Trust, its implications in today’s cybersecurity landscape, and its potential to enhance cyber resilience. The episode also touches on the challenges and misconceptions surrounding the implementation of Zero Trust, particularly for small and mid-sized businesses.

Highlights

1. Dr. Cunningham's Background: He discusses his unique career path from the Navy to cybersecurity, highlighting the importance of diverse backgrounds in the industry.

2. Understanding Zero Trust: Dr. Cunningham explains Zero Trust in simple terms, stressing the idea of "not trusting anything" and how this philosophy applies across various layers of cybersecurity.

3. Zero Trust Misconceptions: The episode tackles common misconceptions, such as the belief that Zero Trust can be achieved by simply deploying a specific technology or product.

4. Challenges for SMBs: The discussion addresses the difficulties small and mid-sized businesses face in implementing Zero Trust, and the importance of working with MSSPs and service providers.

5. Cyber Resilience: Dr. Cunningham defines cyber resilience as the ability to recover from failure and stresses that Zero Trust is a key component in achieving this resilience.

6. Vendor Hype: The episode critiques how some vendors exploit the Zero Trust buzzword for marketing purposes, misleading organizations about what it actually entails.

7. Practical Applications: The conversation includes real-world examples and practical advice on how organizations can start their Zero Trust journey and avoid common pitfalls.