On April 9, 2024, Intecracy Group held a closed offline meeting in the Intecracy Executive Breakfast format. The session focused on “Zero Trust for Large Organizations,” a cybersecurity approach aimed at controlling access when enterprise resources are spread across on-premises environments, cloud services and remote workplaces.
The main speakers were Anton Marrero and Mykhailo Vihovskyi, experts of the consortium. The event was led by Softline IT LLC, a member of Intecracy Group. For technology teams responsible for enterprise systems, integration and cybersecurity, the discussion addressed a practical question: how to strengthen access protection without making daily work unnecessarily complex for users.
Why the internal perimeter is no longer enough
The speakers noted that in hybrid infrastructure the line between an internal and an external network is no longer a reliable control point. Applications and data may operate in several environments at once, while employees connect from offices, homes and mobile devices. In this architecture, trust based only on network location creates additional exposure.
Zero Trust changes that logic. Every request should be verified separately, regardless of where it originates. The focus moves to user identity, device condition, the context of the action and the minimum level of privileges required for a specific task.
Implementing Zero Trust is not a one-time project, but a fundamental transformation of architecture, where identity becomes the new security perimeter.
IAM and MFA as implementation layers
A dedicated part of the Executive Breakfast covered the tools that make the Zero Trust model workable in large environments. IAM helps organizations centrally manage accounts, roles, policies and the access lifecycle. MFA adds an extra verification layer, reducing the impact of compromised passwords.
Anton Marrero and Mykhailo Vihovskyi also addressed adaptive authentication. This approach evaluates contextual factors such as user geolocation, request time, operating system status, device characteristics and behavioral signals. If the risk is higher, the system may require additional confirmation; if the context is typical, the user does not face unnecessary friction.
The biggest challenge for large enterprises is to make security measures effective without blocking business processes.
Integration across legacy systems and clouds
For large organizations, adopting Zero Trust rarely starts from a blank slate. Enterprise landscapes often include legacy systems, internal applications, cloud services and different administration models. That is why the technical strategy needs to account for compatibility, centralized policy configuration, automated provisioning and deprovisioning, and continuous activity monitoring.
The speakers emphasized that the transition should be gradual. New control mechanisms need to be integrated step by step so they do not create an excessive burden for administrators or disrupt business continuity. This approach is close to system integration practice: organizations first identify critical access areas, then align policies, and only after that scale the solution.
Relevance for digital transformation
In the final part of the discussion, Zero Trust was presented not as a single product, but as an architectural principle for organizations with distributed resources. For enterprises, financial institutions and the public sector, this means connecting cybersecurity with the management of corporate systems, data and user experience.
Read the full material on the Intecracy Group website.
