Zero Trust is a Journey
Zero trust is a powerful security strategy, but moving from intention to execution is where many organizations get stuck. Visibility gaps, operational complexity, and organizational friction often create barriers that slow progress and drain momentum.
Limited Visibility and Incomplete Understanding of the Environment
Visibility gaps leave critical blind spots. Without a complete view of users, assets, and data flows, it’s nearly impossible to apply effective zero trust controls. In 75% of the incidents Unit 42 investigated, the logs showed critical evidence of initial intrusion. However, this evidence wasn’t readily accessible or effectively operationalized, allowing attackers to exploit these gaps undetected1. Shadow IT, cloud sprawl, and legacy infrastructure make it difficult to map the environment and define trust boundaries. The result is persistent security gaps and policies based on assumptions rather than reality.
1 Unit 42 2025 Global Incident Response Report, February, 2025
Operational Complexity and Inconsistent Enforcement
Defenders are already stretched thin, relying on manual processes like firewall rule updates and network segmentation that are both time-consuming and prone to error. Legacy systems further complicate enforcement, often lacking support for modern controls such as multifactor authentication (MFA). As organizations expand into hybrid and multicloud environments, the challenge grows, introducing enforcement inconsistencies, integration hurdles, and additional layers of operational complexity.
Organizational Misalignment Undermines Momentum
Even with the right tools, zero trust initiatives often lose momentum due to a lack of strong cross-functional support and shared ownership. This challenge is particularly urgent given that 86% of the incidents Unit 42 responded to in 2024 involved business disruption, spanning operational downtime, reputational damage, or both2. Unclear or misaligned priorities, siloed teams, and fear of disrupting business operations stall progress. Without a cohesive plan, cross-functional support, and sustained executive engagement, zero trust can lose traction before it delivers results.
2 Ibid.
