Zero Trust Architecture, Explained Through a Busy Restaurant Kitchen

Bytaisonik

Why "trusted inside, untrusted outside" stopped working, and how zero trust replaces it, explained through a busy Friday night restaurant kitchen. Covers the NIST SP 800 207 building blocks and tenets, the five CISA pillars and four maturity stages, a practical roadmap, audit evidence and the most common myths.

Chapters

  • 0:00 One password, and they're inside
  • 0:31 Friday night, a fake delivery driver
  • 1:05 Why a kitchen, and who I am
  • 1:38 Tonight's menu
  • 2:10 The old way: castle and moat
  • 2:41 The VPN is the drawbridge
  • 3:19 Lateral movement: walking around the kitchen
  • 3:53 Why the walls broke, part one
  • 4:28 Why the walls broke, part two
  • 5:09 The core idea: never trust, always verify
  • 5:47 Trap: zero trust is not no trust
  • 6:16 Assume breach
  • 6:47 Least privilege
  • 7:20 Every request judged on its own
  • 7:53 Where zero trust came from
  • 8:24 The standards that made it official
  • 9:11 Three roles behind every decision
  • 9:46 The policy engine decides
  • 10:27 The policy administrator hands out keys
  • 11:03 The enforcement point allows or blocks
  • 11:41 One request, start to finish
  • 12:16 What feeds the decision
  • 12:53 The seven tenets, part one
  • 13:29 The seven tenets, part two
  • 13:59 Five pillars from CISA
  • 14:32 Identity: the staff badge
  • 15:07 Identity: badge plus PIN
  • 15:45 Identity: joiners, movers and leavers
  • 16:27 Devices: fit to work
  • 17:07 Devices: health checks before access
  • 17:57 Networks: small zones, not one room
  • 18:33 Networks: encrypt inside, rethink the VPN
  • 19:06 Trap: ZTNA is not zero trust
  • 19:40 Applications: every app checks for itself
  • 20:12 Workloads: least privilege in the cloud
  • 20:55 Data: know what's valuable
  • 21:29 Data: control sharing and export
  • 21:57 Visibility: cameras someone actually watches
  • 22:34 Automation, orchestration and governance
  • 23:13 Four stages of maturity
  • 23:47 A practical roadmap
  • 24:14 Steps one and two: who and what
  • 24:45 Steps three to five: apps, network, data
  • 25:19 Quick wins and long projects
  • 25:51 What to show an auditor
  • 26:21 Myth: zero trust is a product
  • 26:47 More common myths
  • 27:15 Back in the kitchen: the recap
  • 27:42 Your zero trust checklist
  • 28:07 Keep learning on the channel

More courses and explainers on the Taistek YouTube channel. New videos every week.

Free download: get my SOC 2 checklist, study guides and ISO 27001 templates at taistek.com/free-resources.

Support the channel

All my courses are free. If this one helped you pass an exam, land a job or get through an audit, a small tip helps me keep making them.

Support on Ko-fi ☕

Similar Posts