GFT Report November 2024 | Page 17

GFT
This integration enables the consolidation of alerts , analysis acceleration and the ability to swiftly respond to security incidents , thereby minimising the time to remediation and optimising the efficacy of the overall security operation .
Implementing a ‘ Zero trust ’ philosophy These measures are capped off by Salt Bank ’ s ‘ Zero trust ’ philosophy , which GFT has implemented within the bank ’ s ecosystem as cloud components are developed and begin interacting with others in-cloud components and services , and with other third parties .
Proper demarcation is established between applications and the users
interacting with the cloud resources , while the principle of ‘ no access being permitted without identification ’ is rigorously enforced . Once access is established , monitoring and logging setup are implemented to inspect the traffic interacting with the system .
To enhance security further , mutual transport layer security ( TLS ) is used as a key design principle when authenticating with any third party over the internet .
To implement least privilege access , GFT builds in segmentation , not only on the network layer but also with the cloud resources that are accessed , by leveraging AWS resource-based policy restrictions . gft . com 17