SOLUTION
BRIEFZero Trust Security
There Is No “Zero Trust” Without Intelligence
Challenges Today
For years, security practices were structured aroundprotecting a company’s critical infrastructure and assets
by working to secure the perimeter. The assumption
was that if you prevented someone from accessing yournetwork with robust controls, then you could trust thepeople on the network to perform privileged actions.
This was the model of a castle - where you construct amoat and strong walls - but this model does not scale
to the distributed and often cloud-based applications
that are used within enterprises today. Now, instead ofwalls, organizations need watchtowers that allow themto continuously monitor their internal and external threat
landscape for compromised identities.

Zero Trust is Just the Beginning
Organizations must now secure every authentication andaction request that is being made, regardless of whether
the user is on the network or remote. To accomplish this,many organizations are moving towards a Zero Trustmodel, as it allows for zero implicit trust based on thelocation or previous authentication grants of the user.
Establishing user trust and ensuring that only authorizedusers are attempting to access resources can be achievedin a number of ways. Multi-factor authentication (MFA)
and passwordless authentication are both common
options today, but neither are perfect solutions thateliminate identity-related risks for organizations.

Many MFA solutions, especially for consumer services,
rely on SMS messages to send a code to the user which
unfortunately can be hacked or spoofed. Additionally,
there will inevitably be some legacy systems that don’t
support MFA, leaving a door open to threat actors. And inregards to passwordless authentication, credentials areused to authenticate the system on the backend, meaning
password security and the user’s identity are still potential
avenues for compromise.
So while MFA and passwordless authentication solutions
provide more secure solutions for accessing businesscritical applications and infrastructure, they don’t solve forthe fundamental issue of a Zero Trust model, which still
inherently relies on one thing - a user’s identity.
As organizations remove implicit trust based on a device
or network segment, they place more importance on theauthenticity and security of a user’s identity. Therefore,to ensure their access and security management iseffective, organizations must also increase the datadriven insights for an identity. Identity Intelligence
provides the critical insights for a Zero Trust approach, byenabling organizations to automatically identify identity
compromises and be able to respond confidently —all without any manual effort.

Recorded Future® | www.recordedfuture.com

Identity Intelligence for a Zero Trust Model
The Identity Intelligence module by Recorded Future
automates the collection, analysis, and production ofintelligence from a vast range of open source, dark web, andtechnical sources, offering an unmatched source of truth foridentity authenticity that can be automatically integrated intoa Zero Trust based environment to dramatically reduce theamount of time it takes to detect, investigate, and respondto real risks to the organization. Identity Intelligence enables
organizations to:•Identify the Riskiest Users and Enforce More Robust
Security Controls: Continuously measure user risk
based on their security posture and exposure trends
to target more robust controls. Users with highcompromises should be required to reset passwords
more frequently, use stronger passwords, or use MFA
for every login attempt.

•Proactively Reset Compromised Identities withConfidence: Utilize real-time intelligence to trigger
automatic actions such as restricting access on
a compromised account or requiring multi-factor
authentication, since many systems only require
MFA every few days or weeks by default.

•Investigate and Determine Root-Case for Security
Incidents: Understand the context of security
incidents to increase the speed and quality ofthe root-case analysis.

This intelligence-driven approach to Zero Trust security
empowers organizations to disrupt adversaries before
damage to the business can be done. With relevant
insights, updated in real-time, from Recorded Future’s
Identity Intelligence module, organizations can effectively
prevent identity fraud and reduce risk.

ABOUT RECORDED FUTURE
Recorded Future is the world’s largest provider of intelligence for enterprise security. By combining persistent and pervasive automated data collection and analytics with human analysis,
Recorded Future delivers intelligence that is timely, accurate, and actionable. In a world of ever-increasing chaos and uncertainty, Recorded Future empowers organizations with the visibility
they need to identify and detect threats faster; take proactive action to disrupt adversaries; and protect their people, systems, and assets, so business can be conducted with confidence.
Recorded Future is trusted by more than 1,000 businesses and government organizations around the world.

www.recordedfuture.com@RecordedFuture

Recorded Future® | www.recordedfuture.com© Recorded Future®, Inc. All rights reserved. All trademarks remain property of their respective owners.