Zero Trust at GitLab: The data classification and infrastructure challenge
Aug 21, 2019Mark Loveless
Summary
This post details the challenges of implementing Zero Trust (ZTN) at GitLab, focusing on data classification and infrastructure. It outlines the data classification policy (RED, ORANGE, YELLOW, GREEN) and the anticipated challenges with ZTN, including the changing state of data, tracking metadata, time limits on data, data capability, and data movement. It also discusses infrastructure challenges related to multi-cloud environments, unclear administrative access, and enforcing SaaS application privileges. The post sets the stage for future installments discussing specific design solutions.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting