Zero Trust Must Extend to Data at Rest
Zero Trust assumes that access should not be inherited simply because a user has physical access, a device is known, or a connection originates from a trusted environment. At the endpoint, the same principle should apply to the data stored on the system.
Cigent applies Zero Trust principles directly to data at rest by treating every power-on, pre-boot, and protected-data access attempt as untrusted until identity and authorization are verified. Both Cigent PBA and Cigent FDE support multi-factor authentication options, while pairing the two solutions creates independent authentication and encryption layers for defense in depth. Protected data remains locked until the applicable authentication requirements are satisfied.
ZERO TRUST FOR DATA AT REST
Cigent PBA and Cigent FDE verifies users before the operating system loads and before protected data is made available. Access is not assumed simply because a device powers on.
Cigent limits data exposure by separating access based on user, role, or mission need. This supports least-privilege access on shared systems, multi-user devices, and platforms carrying multiple data sets.
Tamper-resistant logs record authentication and protected-data access events, providing visibility into user activity and supporting investigation, oversight, and lifecycle control.
Manage users, authentication settings, policies, configurations, and protection states through repeatable workflows across distributed endpoints.
