{"id":68541,"date":"2023-05-01T14:34:49","date_gmt":"2023-05-01T18:34:49","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=68541"},"modified":"2024-11-05T18:00:11","modified_gmt":"2024-11-05T23:00:11","slug":"7-zero-trust-security-steps-smes","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes","title":{"rendered":"7 Simple Zero Trust Action Steps for SMEs&nbsp;"},"content":{"rendered":"\n<p><em>Trust nothing and verify everything.<\/em><\/p>\n\n\n\n<p>Does this sound like the maxim of a bleak, dystopian society? It\u2019s actually the core philosophy behind the increasingly popular<a href=\"https:\/\/jumpcloud.com\/blog\/zero-trust-long-term-security\"> Zero Trust security framework<\/a>.&nbsp;<\/p>\n\n\n\n<p><strong>Zero Trust<\/strong> involves implementing several controls designed to ensure only verified network users can access limited organizational resources on trusted devices.&nbsp;It also promotes safeguarding data infrastructure with practices like<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-microsegmentation\"> microsegmentation<\/a> of \u201ceast-to-west\u201d traffic protection measures to reduce the severity of potential breaches.<\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/WuQuSVdX9aU?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<p>Random take: William Shakespeare totally would have embraced Zero Trust. The playwright shrewdly recognized that kindness isn\u2019t synonymous with unearned trust.&nbsp;<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Love all, trust a few, do wrong to none.<\/p>\n<cite><strong>William Shakespeare,<\/strong><a href=\"https:\/\/www.goodreads.com\/work\/quotes\/3124595\" target=\"_blank\" rel=\"noreferrer noopener\"><strong> All&#8217;s Well That Ends Well<\/strong><\/a><\/cite><\/blockquote>\n\n\n\n<p>Starting any new endeavor can feel overwhelming, especially when one wrong move could cause productivity to come to a grinding halt.&nbsp;<\/p>\n\n\n\n<p>This article will highlight seven simple action steps \u2014 emphasis on the word <em>simple <\/em>\u2014 for small-to-medium-sized enterprises (SMEs) wanting to move toward a Zero Trust security framework.<\/p>\n\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/image-1-1-aspect-ratio-160-110-1.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            The IT Manager\u2019s Guide to Data Compliance Hygiene        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            How to ace your audit        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/resources\/data-compliance-guide\" data-promo=\"Data Compliance Hygiene\" class=\"button is-primary-green promo-small-banner-link\">Get the Guide <\/a>\n    <\/div>\n<\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading1\">The FBI, 792K Cybercrime Complaints, and Zero Trust<\/h2>\n\n\n\n<p>Did you know the FBI received<a href=\"https:\/\/www.fbi.gov\/news\/press-releases\/press-releases\/fbi-releases-the-internet-crime-complaint-center-2020-internet-crime-report-including-covid-19-scam-statistics#:~:text=The%20FBI's%20Internet%20Crime%20Complaint,reported%20losses%20exceeding%20%244.2%20billion.\" target=\"_blank\" rel=\"noreferrer noopener\"> nearly 792K complaints<\/a> of \u201csuspected internet crimes and losses\u201d in 2020? The average total loss exceeded $4.2 billion.&nbsp;<\/p>\n\n\n\n<p>Translation: Your coworkers themselves can be trusted, but unverified logins from unfamiliar networks and devices should now be<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-zero-trust-network-access\"> assumed guilty until proven innocent.<\/a>&nbsp;<\/p>\n\n\n\n<p>On-premise security solutions were not built to handle modern security threats that are only being amplified within vulnerable<a href=\"https:\/\/jumpcloud.com\/blog\/why-embrace-remote-work\"> remote workforces<\/a>. Statistics like these, and well-known brands making<a href=\"https:\/\/www.upguard.com\/blog\/biggest-data-breaches\" target=\"_blank\" rel=\"noreferrer noopener\"> newspaper headlines<\/a>, that have brought a proven cybersecurity framework to the forefront of public conversation.<\/p>\n\n\n\n<p>&nbsp;John Kindervag, Forrester Research analyst,<a href=\"https:\/\/www.darkreading.com\/perimeter\/forrester-pushes-zero-trust-model-for-security\" target=\"_blank\" rel=\"noreferrer noopener\"> coined the \u201cZero Trust\u201d term<\/a> back in 2010.&nbsp;<\/p>\n\n\n\n<p>As shown in the graph below, the term didn\u2019t gain notoriety until around 2018:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"150\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/09\/graph.png\" alt=\"graph showing popularity of zero trust term over the years\" class=\"wp-image-68544\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/graph.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/graph-300x88.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Nonetheless, only<a href=\"https:\/\/jumpcloud.com\/resources\/it-trends-report-remote-work-security-cloud-services\" target=\"_blank\" rel=\"noreferrer noopener\"> 23% of small and medium enterprises (SMEs)<\/a> have fully embraced Zero Trust. Overcomplication of Zero Trust, lack of strategy, and misunderstanding among executive leadership are some of the reasons for the slow adoption rate.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading2\">7 Simple Action Steps to Build Zero Trust<\/h2>\n\n\n\n<p>Does any of that sound familiar? If so, consider focusing on the seven simple steps below to move your SME in the direction of Zero Trust.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading3\">1. Take Stock of Digital Assets&nbsp;<\/h3>\n\n\n\n<p>Zero Trust authority Forrester recommends creating a roadmap based on five categories:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Networks<\/li>\n\n\n\n<li>Data<\/li>\n\n\n\n<li>Devices<\/li>\n\n\n\n<li>Workloads<\/li>\n\n\n\n<li>Identity<\/li>\n<\/ul>\n\n\n\n<p>The catch is you can only do this exercise if you have good visibility. Users often access resources from multiple devices across various networks and apps. Create a comprehensive inventory for all of the above to inform strategy around how to best take baby steps toward a Zero Trust network.<\/p>\n\n\n\n<p>More importantly, know where your most sensitive data is, how it flows across the organization, the users accessing it, and the devices they use to access it. Taking an inventory will help you to prioritize and focus on your digital assets that need more protection.&nbsp;<br>It\u2019s essential to recognize that Zero Trust implementation isn\u2019t a one-off event. As mentioned before, Zero Trust is not a product but a framework. It\u2019s a gradual process that can take years to fully implement. Google, for example, took about six years to shift from its VPN and privileged network access model to its own Zero Trust network.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading4\">2. Focus on Identity and Access Management<\/h3>\n\n\n\n<p>Have you heard of the <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\"><strong>principle of least privilege (PLP)<\/strong><\/a>? It\u2019s a way to ensure employees have access to just enough resources they need to do their job \u2014 coincidentally, this is also the core element of identity and access management (IAM).&nbsp;<\/p>\n\n\n\n<p><strong>IAM<\/strong> securely manages and connects users to the right IT resources at the right times and for the right reasons. These resources include identities, networks, files, apps, and devices. Each user receives controlled access to the digital assets they need, while simultaneously being locked out of those they don\u2019t need.&nbsp;<\/p>\n\n\n\n<p>IAM is one of the most important IT functions, especially in an increasingly hybrid workplace. When implemented correctly, it prevents sensitive resources from landing in the wrong hands. For example, contracted administrative workers gaining access to a company\u2019s financial records.&nbsp;<\/p>\n\n\n\n<p><strong>Here are a few <\/strong><a href=\"https:\/\/jumpcloud.com\/blog\/what-is-iam\"><strong>tips to build an effective IAM system<\/strong><\/a><strong>:<\/strong><\/p>\n\n\n\n<ul>\n<li>Start with directory services and organize identities into logical access groups.<\/li>\n\n\n\n<li>Use directory extensions to increase functionalities.&nbsp;<\/li>\n\n\n\n<li>Implement PLP to ensure every user gets the right level of access.<\/li>\n\n\n\n<li>Streamline access to different web apps with single sign-on (SSO).<\/li>\n\n\n\n<li>Leverage password vaults to increase convenience without jeopardizing security.<\/li>\n\n\n\n<li>Deploy multi-factor authentication (MFA).<\/li>\n<\/ul>\n\n\n\n<p>It\u2019s worth emphasizing that implementing IAM in a remote work environment can be extremely complex because remote employees work on multiple platforms using various devices. Leverage a platform like the JumpCloud open directory to streamline IAM in heterogeneous environments.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading5\">3. Enable Multi-Factor Authentication<\/h3>\n\n\n\n<p><strong>Multi-factor authentication (MFA)<\/strong> is a core component of IAM that requires users to provide more than one verification method before accessing a resource.&nbsp;<\/p>\n\n\n\n<p>Authentication requires any of the following additional elements of information:<\/p>\n\n\n\n<ul>\n<li><strong>Knowledge:<\/strong> Things users <em>know<\/em>, such as a PIN or passcode.<\/li>\n\n\n\n<li><strong>Possession:<\/strong> Things users <em>have<\/em>, for example, a smartphone or a badge.<\/li>\n\n\n\n<li><strong>Inherence:<\/strong> Things users <em>are<\/em>, such as voice recognition or fingerprints.<\/li>\n<\/ul>\n\n\n\n<p>MFA requires additional verification factors beyond a basic username and password because this has been proven to decrease the likelihood of a security breach. One of the most common MFA methods is one-time passwords (OTP).&nbsp;<br>Multi-factor authentication is one of the most critical steps toward Zero Trust.<a href=\"https:\/\/security.googleblog.com\/2019\/05\/new-research-how-effective-is-basic.html\"><\/a><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><a href=\"https:\/\/security.googleblog.com\/2019\/05\/new-research-how-effective-is-basic.html\" target=\"_blank\" rel=\"noreferrer noopener\">According to Google<\/a>, MFA can stop <em>all<\/em> automated attacks, 96% of bulk phishing attacks, and 75% of targeted attacks.&nbsp;<\/p>\n<\/blockquote>\n\n\n\n<p>At least<a href=\"https:\/\/www.securitymagazine.com\/articles\/91073-more-enterprises-using-multi-factor-authentication-to-secure-passwords\" target=\"_blank\" rel=\"noreferrer noopener\"> 57% of companies globally<\/a> are already implementing MFA.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading6\">4. Beef Up Credentials&nbsp;<\/h3>\n\n\n\n<p>Weak passwords compromise the security of your systems and make it easy for malicious characters to gain access to your network resources. The stronger your password, the harder it is to crack and the more effective at preventing breaches.&nbsp;<\/p>\n\n\n\n<p>Weak passwords, such as \u201c123456\u201d or \u201cadmin,\u201d are a hacker\u2019s paradise because they are easy to guess. Other common password mistakes users make include using:<\/p>\n\n\n\n<ul>\n<li>Default passwords that come with the device.<\/li>\n\n\n\n<li>Short passwords.<\/li>\n\n\n\n<li>Passwords that don\u2019t contain numbers or symbols.<\/li>\n\n\n\n<li>Passwords substituting letters with numbers, for example using 4 for the letter A.&nbsp;<\/li>\n\n\n\n<li>Passwords that contain personal information.<\/li>\n\n\n\n<li>Passwords that follow a pattern, for example, Qwerty098765<\/li>\n<\/ul>\n\n\n\n<p>With so many accounts to keep track of, it\u2019s often difficult for employees to remember their passwords. This is why we recommend using a password manager. A trusted password manager creates and stores strong, lengthy passwords for users. The user simply memorizes a single master password to gain entry into multiple accounts. Keeper and OnePassword are user-friendly password manager vendors worth considering.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading7\">5. Prioritize Mobile Device Management<\/h3>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/blog\/mdm-mobile-device-management\">Mobile device management (MDM)<\/a> is a toolset that enables IT managers to secure, control, and enforce policies on mobile devices. It is a core component of enterprise mobility management (EMM) that helps to optimize the functionality of enterprise mobile devices while protecting the company network.\u00a0<\/p>\n\n\n\n<p>MDM makes it possible for organizations to manage end-user devices without disrupting their workflow. With remote and distributed workforces becoming the norm, MDM helps securely onboard employees and configure devices. It enforces cybersecurity by only allowing conditional access and protecting lost or misplaced devices through shutdown, lock, and wipe commands.<\/p>\n\n\n\n<p>Several MDM solutions offer different features and capabilities in the marketplace. When evaluating your options, consider a solution such as JumpCloud that offers a unified platform for managing Windows, Apple, and Linux devices behind one pane of glass.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading8\">6. Reduce Your Attack Surface<\/h3>\n\n\n\n<p>An attack surface refers to the area of your organization or system that\u2019s vulnerable to unauthorized access. It\u2019s the entry point that malicious actors use to enter systems and manipulate resources or download sensitive data. And it\u2019s, basically, the entire external-facing area of your system.&nbsp;<\/p>\n\n\n\n<p>Common attack surfaces include corporate websites, virtual private networks (VPNs), employee portals, expired security certificates, and stolen employee credentials. The smaller the attack surface, the easier it is to protect.&nbsp;<\/p>\n\n\n\n<p><strong>Below are a few ways to reduce your attack surface:<\/strong><\/p>\n\n\n\n<ul>\n<li>Conduct a surface attack analysis to identify your vulnerabilities.<\/li>\n\n\n\n<li>Implement privileged identity management.<\/li>\n\n\n\n<li>Limit authentication access entry points.<\/li>\n\n\n\n<li>Segment your networks.<\/li>\n\n\n\n<li>Protect backups.<\/li>\n\n\n\n<li>Use strong authentication policies.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"heading9\">7. Prioritize Patch Management<\/h3>\n\n\n\n<p>IT admins must continuously monitor your devices, apps, and systems to identify and address security vulnerabilities. This is why patch management is an integral component of Zero Trust.<\/p>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/platform\/patch-management\"><strong>Patch management<\/strong><\/a><strong> <\/strong> is the process of coordinating software patches and updates on devices, apps, and systems. It includes testing, rollout, monitoring, and in some cases, rollbacks across the organization.\u00a0<\/p>\n\n\n\n<p>Patch management helps make patching more predictable, visible, efficient, compliant, insightful, and automated. It also makes the process less error-prone and easier to reconfigure.<\/p>\n\n\n\n<p>The best practice is essential for organizations that have adopted remote work and bring your own device (BYOD) policies. It can be done in a piecemeal or orchestrated manner; piecemeal patch management means initiating different processes for different operating systems, while orchestrated patch management requires coordinating across different operating systems, applications, and devices.&nbsp;<\/p>\n\n\n\n<p>Tools such as the JumpCloud open directory platform automate cloud patch management so IT admins and MSPs can focus on other high-priority tasks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Simplify Zero Trust with JumpCloud&nbsp;<\/strong><\/h3>\n\n\n\n<p>Rome wasn\u2019t built in a day, and neither are the strongest Zero Trust network architectures. Zero Trust isn\u2019t a single switch you can turn on. It\u2019s a combination of several best practices that work together to tighten network security.&nbsp;<\/p>\n\n\n\n<p>But you can enhance your organizational security by taking any of the small steps discussed in this article. Have your organization\u2019s Zero Trust initiatives stalled because of tool sprawl? It\u2019s not uncommon for SMEs to postpone security initiatives due to both budgetary constraints and unsynchronized stacks.&nbsp;<\/p>\n\n\n\n<p>If this is your dilemma, we invite you to try the JumpCloud Directory Platform. JumpCloud consolidates your most crucial Zero Trust point tools into a centralized platform for IAM, MFA, SSO, and patch management implementation at a fraction of the cost.<\/p>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/pricing\" target=\"_blank\" rel=\"noreferrer noopener\">Try JumpCloud for free today.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.<\/p>\n","protected":false},"author":163,"featured_media":68546,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[],"collection":[2776,2775],"platform":[],"funnel_stage":[3015],"coauthors":[2640],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>7 Zero Trust Security Baby Steps (for SMEs) - JumpCloud<\/title>\n<meta name=\"description\" content=\"This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"7 Simple Zero Trust Action Steps for SMEs&nbsp;\" \/>\n<meta property=\"og:description\" content=\"This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-01T18:34:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-05T23:00:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"339\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ashley Gwilliam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ashley Gwilliam\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\"},\"author\":{\"name\":\"Ashley Gwilliam\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/9a303f41694779a71dd04b04da8aa178\"},\"headline\":\"7 Simple Zero Trust Action Steps for SMEs&nbsp;\",\"datePublished\":\"2023-05-01T18:34:49+00:00\",\"dateModified\":\"2024-11-05T23:00:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\"},\"wordCount\":1682,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg\",\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\",\"url\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\",\"name\":\"7 Zero Trust Security Baby Steps (for SMEs) - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg\",\"datePublished\":\"2023-05-01T18:34:49+00:00\",\"dateModified\":\"2024-11-05T23:00:11+00:00\",\"description\":\"This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg\",\"width\":512,\"height\":339,\"caption\":\"a business man using a computer to manage documents online document communication database and digital file storage systems\/software record keeping database technology file\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"7 Simple Zero Trust Action Steps for SMEs&nbsp;\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/9a303f41694779a71dd04b04da8aa178\",\"name\":\"Ashley Gwilliam\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d3b37a5984e42e6e804d9a51bed254f5\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b3dd158d0b18740a9264ced7585c78c9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b3dd158d0b18740a9264ced7585c78c9?s=96&d=mm&r=g\",\"caption\":\"Ashley Gwilliam\"},\"description\":\"Ashley Gwilliam is a Content Writer for JumpCloud. After graduating with a degree in print-journalism, Ashley\u2019s storytelling skills took her from on-camera acting to interviewing NBA basketball players to ghostwriting for CEOs. Today she writes about tech, startups, and remote work. In her analog life, she is on a quest to find the world's best tacos.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"7 Zero Trust Security Baby Steps (for SMEs) - JumpCloud","description":"This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes","og_locale":"en_US","og_type":"article","og_title":"7 Simple Zero Trust Action Steps for SMEs&nbsp;","og_description":"This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.","og_url":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes","og_site_name":"JumpCloud","article_published_time":"2023-05-01T18:34:49+00:00","article_modified_time":"2024-11-05T23:00:11+00:00","og_image":[{"width":512,"height":339,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg","type":"image\/jpeg"}],"author":"Ashley Gwilliam","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ashley Gwilliam","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes"},"author":{"name":"Ashley Gwilliam","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/9a303f41694779a71dd04b04da8aa178"},"headline":"7 Simple Zero Trust Action Steps for SMEs&nbsp;","datePublished":"2023-05-01T18:34:49+00:00","dateModified":"2024-11-05T23:00:11+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes"},"wordCount":1682,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg","articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes","url":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes","name":"7 Zero Trust Security Baby Steps (for SMEs) - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg","datePublished":"2023-05-01T18:34:49+00:00","dateModified":"2024-11-05T23:00:11+00:00","description":"This article will highlight seven simple action steps for small-to-medium-sized enterprises (SMEs) wanting to implement Zero Trust.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/09\/zero-trust.jpeg","width":512,"height":339,"caption":"a business man using a computer to manage documents online document communication database and digital file storage systems\/software record keeping database technology file"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/7-zero-trust-security-steps-smes#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"7 Simple Zero Trust Action Steps for SMEs&nbsp;"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/9a303f41694779a71dd04b04da8aa178","name":"Ashley Gwilliam","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d3b37a5984e42e6e804d9a51bed254f5","url":"https:\/\/secure.gravatar.com\/avatar\/b3dd158d0b18740a9264ced7585c78c9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b3dd158d0b18740a9264ced7585c78c9?s=96&d=mm&r=g","caption":"Ashley Gwilliam"},"description":"Ashley Gwilliam is a Content Writer for JumpCloud. After graduating with a degree in print-journalism, Ashley\u2019s storytelling skills took her from on-camera acting to interviewing NBA basketball players to ghostwriting for CEOs. Today she writes about tech, startups, and remote work. In her analog life, she is on a quest to find the world's best tacos.","sameAs":["https:\/\/jumpcloud.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/68541"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/163"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=68541"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/68541\/revisions"}],"predecessor-version":[{"id":117159,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/68541\/revisions\/117159"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/68546"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=68541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=68541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=68541"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=68541"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=68541"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=68541"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=68541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}