Zero trust in practice: five steps for Thai organisations

When people work from anywhere, applications live in the cloud and attackers would rather steal a password than break through a firewall, the old model of a trusted inside and a hostile outside no longer holds. Zero trust replaces it with a simple principle: never trust by default, always verify — wherever a connection comes from.

The good news is that you don’t have to change everything at once. Here are five steps you can start on today.

1. Know what you are protecting

Build an inventory of users, devices, applications and critical data, and define who should access what. Visibility is the foundation of every policy that follows.

2. Strengthen identity

Turn on MFA for every account — especially administrators and remote access. Centralise authentication with single sign-on, and control privileged accounts tightly.

3. Segment the network

Separate critical systems from general user networks and allow only the connections that are genuinely needed between segments, so an intruder who gets in cannot move freely.

4. Grant access to applications, not networks

Replace traditional VPNs with zero-trust network access (ZTNA) or SASE, which lets users reach only the applications they are entitled to — based on identity and device posture, checked every time.

5. Monitor continuously

Zero trust depends on constant verification: collect logs from every layer, detect abnormal behaviour and define response steps in advance — in-house or through a Managed SOC 24/7 service.

Start where the risk is highest

For most organisations, steps two and four deliver the fastest return on investment. APJC’s team can assess where you stand today and plan a zero-trust approach that fits your organisation. Explore our cybersecurity solutions.