.png){kind=icon}
.png){kind=icon}
Return
Implementing Zero Trust in Cloud Environments: Case Studies, Practical Guidelines
.png){kind=icon}
PRE
AI
DOI：10.22967/hcis.2026.16.025.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Cloud technology is now a foundational part of the modern IT landscape and is forecast to continue growing considerably. The cloud offers great opportunities for organizations that want to innovate to meet their business goals. At the same time, however, its inherent characteristics give rise to security challenges that traditional perimeter-based security models struggle to address. For this reason, Zero Trust is becoming a robust security paradigm for dynamic cloud environments. Zero Trust Architecture (ZTA) provides a powerful security framework, but actually putting it into practice is not as easy as it sounds. While ZTA is a critical security paradigm for dynamic cloud environments, many organizations struggle to translate its basic principles into concrete, actionable implementation steps, often finding the existing frameworks too abstract for direct application. In practice, turning the defined ZTA concept into a process for actual implementation remains a major hurdle. This paper addresses this critical implementation gap. We conducted an in-depth analysis of pioneering, large-scale ZTA deployments in cloud-centric settings by Google (BeyondCorp) and Microsoft. Our core contribution is the distillation of their key strategies, challenges encountered, and lessons learned into a novel set of systematic, phased, and actionable guidelines. These guidelines are expected to provide clear and practical advice to help address the complex challenges faced by businesses seeking to deploy and operate ZTA in cloud environments and help narrow the gap between theory and field.
Keywords:
Cloud
Zero Trust
Zero Trust Architecture (ZTA)
BeyondCorp
Microsoft
Guideline
Journal
IF:
3
Papers:
555
Citations:
1.4K