Modern Approaches to Network Access Security

CISA, in collaboration with the following organizations, co-authored this joint guidance:

• Federal Bureau of Investigation (FBI)
• New Zealand’s Government Communications Security Bureau (GCSB); 
• New Zealand’s Computer Emergency Response Team (CERT-NZ); and 
• The Canadian Centre for Cyber Security (CCCS).

The guidance urges business owners of all sizes to move toward more robust security solutions—such as Zero Trust, Secure Service Edge (SSE), and Secure Access Service Edge (SASE)—that provide greater visibility of network activity. Additionally, this guidance helps organizations to better understand the vulnerabilities, threats, and practices associated with traditional remote access and VPN deployment, as well as the inherent business risk posed to an organization’s network by remote access misconfiguration.