“When implementing zero trust security architectures, an official from the Department of Health and Human Services (HHS) said today that the real change is not a technology change, but instead a ‘cultural change’ within the organization.”
“At ATARC’s Federal Security Breakfast Summit on April 14, Nicole Willis, the chief technology officer of HHS’ Office of Management and Policy, Office of Inspector General, explained that her agency is currently building a strategy to integrate zero trust into HHS’ culture.”
“’It’s not just a technology change, we’re doing cultural change efforts and changing our communication,’ Willis said.”
“’We’re really working on the strategy around how do we change our business operations to manage a multi-cloud environment and make sure that we’re building things – building in security and zero trust architecture from the start,’ she added. ‘And enabling the development teams to be part of the zero trust and cyber practices.'”
“One way HHS is doing this, Willis said, is through employee trainings centered around zero trust. These may come in the form of a ‘zero trust 101’ training with staff or a ‘why is zero trust important to everyone’ training with the entire OIG community, she said.”
“Willis explained it’s important to educate everyone on zero trust and bring the users in the community to be a ‘part of zero trust’ so that they can be ‘comfortable with the concepts.’ Willis’ explanation piggybacked on HHS OIG CIO Gerald Caron’s talk from earlier at the summit, which keyed on the importance of communication and collaboration in building a zero trust architecture…” Read the full article here.
Source: Zero Trust is a ‘Cultural Change,’ not a Tech Change, HHS Official Says – By Grace Dille, April 14, 2022. MeriTalk.
