In this episode of Zero Trust Journey, host Zach Pugh talks with Nemi George, an experienced information security executive, about the practical realities of implementing Zero Trust in a busy organization—especially where patient care and time-sensitive workflows collide with security needs. Nemi shares real-world strategies for starting small with critical assets, streamlining multi-factor authentication, and addressing legacy systems without disrupting business operations. The discussion underscores how Zero Trust should enable the organization by prioritizing user experience, cultural alignment, and clear leadership support.

Highlights

• Balancing Security & User Experience: Why understanding workflows—especially in clinical settings—is crucial to successful Zero Trust.
• Starting Small, Thinking Big: How focusing on critical data and systems first can reduce complexity and risk.
• Adaptive Authentication & MFA: Strategies for right-sizing multifactor requirements without bringing business to a halt.
• Zero Standing Privileges: Using just-in-time access and least privilege principles to lock down user accounts.
• Legacy Systems & Micro-Segmentation: Practical ways to incorporate older or specialized devices into a modern Zero Trust framework.

Key Takeaways

• Know Your Assets: Accurate asset inventory is the foundation of any effective security program.
• User-Centric Security: Security should align with user workflows, minimizing friction while maintaining strong protections.
• Leadership Buy-In: Zero Trust initiatives are more successful when presented as business enablers rather than “controls.”
• Passwordless Future?: Long passphrases, biometrics, and context-based access can reduce both risk and user frustration.
• Culture & Technology: Zero Trust is a shift in mindset, not just a collection of tools—successful adoption requires both process optimization and stakeholder engagement.

Stay connected with the Zero Trust Journey! Follow us on LinkedIn and subscribe to our YouTube for insights, discussions, and updates. Visit our website for exclusive content and to stay informed on the latest Zero Trust strategies.

Disclaimer: The views expressed are those of the speakers.