Zero-Clear Tier 1 (of 3) High impact to an organization who is implementing at this level, but provides unparalleled security posture in protecting information. This level WILL impose significant changes in organizational policy, operational procedures, and technical controls, tools and configurations to support a VERY resilient target for even the most determined and resourceful adversaries. Solutions do have baselines but EACH part needs to be qualified for completeness of vision and completeness of implementation as it relates to the specific organization, and their specific primary use-case(s), leveraged peripheral use cases. Architecture, engineering, and implementation teams should include multiple thought-leaders at every level in order to “fully bake” the entirety of the use case, at every level.
These teams will often include certifications and degrees such as PhD, CISSP, CCIE, GISP, and the absolute best thought minds in the industry. There is no substitute for the best of the brightest, in mass.
Technical Vectors to consider:
- All of Tiers 3, 2 and additionally…
- Adopt a privacy-centric OS for your mobile devices such as Graphine OS (GraphineOS.org)
Operational (Human-Based Procedures) Vectors to consider:
None at this time
Management (Organizational Policy) Vectors to consider:
- None at this time