CIOs and CISOs facing the new Zero Trust: maintaining control without hindering automation
The responses make it clear that one of the main changes directly affects identity, one of the classic pillars of Zero Trust.
The model no longer revolves solely around users and devices; agents, automation, APIs and processes capable of making decisions or carrying out actions autonomously are now also at play. In practice, this is shifting the focus from simple access verification to the expected behaviour of each entity. Manuel Asenjo Ayllón, CIO and CISO of Écija Abogados, sums up this change well by noting that “the perimeter is no longer defined only by people; it is also defined by processes.”
In their organisation, the management of non-human identities has become “a real priority,” to the point where each automation is treated “as another critical identity, with a limited scope of action and under constant supervision.”
This is not just a theoretical experience. As he explains, they have already encountered “real cases of processes that have diverged with completely unexpected outcomes,” something that is leading them to strengthen micro-segmentation models and the principle of least privilege, also for automated agents.
Article by Manuel Asenjo, CIO and CISO at ECIJA. Read the full article here.
LATEST FROM #ECIJA
Most companies believe they have a clear understanding of what personal data they process. However, this perception is often limited to their customer database, when in fact the processing of personal data covers much more than that.
A new chapter for cybersecurity in the Dominican Republic, with ECIJA playing an active role as a founding member.
The emergence of AI models like Claude Mythos is transforming risk management and cybersecurity, and forcing organizations to strengthen their ability to anticipate and respond.
When people talk about artificial intelligence (AI) in the legal sector, they almost always refer to the large law firms and their multi-million pound investments in LegalTech.
Understand how identity management is changing in an environment where AI, agents, and automated processes are playing an increasingly significant role in operations.
Madrid will soon host the Osintech forum, a high-level private meeting organized by ECIJA that will bring together representatives from the National Cryptology Centre (CCN), the police forces, and strategic experts from the public and private sectors.
Spain is drafting a law that will require public and private organizations in strategic sectors to demonstrate their ability to withstand and recover from any kind of threat.
Javier Arnaiz advises companies and national and international regulatory bodies on strategic projects related to cybersecurity, data protection, and compliance.
The European Artificial Intelligence Regulation (AIR) introduces a comprehensive approach to literacy in artificial intelligence as an essential element to ensure the safe, ethical, and legal use of this technology.
