Building Your Zero Trust Strategy with NIST 800-207

This white paper outlines the framework for implementing a Zero Trust strategy based on NIST 800-207. It discusses the transition to Zero Trust as organizations adapt to digital transformation, particularly in response to the COVID-19 pandemic. The document emphasizes that Zero Trust is an ongoing journey rather than a one-time project. It provides guidance on how to approach the NIST 800-207 document, suggesting a non-linear reading of its sections for better understanding. Key sections are highlighted, including the need for ongoing monitoring and the importance of understanding the evolving threat model. The paper also details the necessity of visibility and control at the network level, addressing challenges posed by shadow IT and encrypted traffic. It presents Arista NDR's capabilities in managing these challenges, including automated threat detection and risk assessment. The paper concludes with practical considerations for implementing Zero Trust principles effectively within an organization’s network architecture.