“Crawl, walk, run into zero trust”: a Q&A with Elastic’s John Harmon

John Harmon, an ex-NSA analyst and current Regional Vice President of Cyber Solutions at Elastic, provides insights into the challenges and strategies for implementing zero trust security, particularly in the context of federal agencies responding to executive orders following the SolarWinds breach. The core challenge lies in budget constraints, as these mandates are unfunded, and the existing continuing resolution limits new purchases. Harmon advises a gradual approach to adopting zero trust, avoiding complete overhauls and instead leveraging existing systems to meet compliance requirements. He highlights the collaboration between Tines and Elastic, which offers agencies a robust solution for continuous monitoring, threat detection, and incident response through high-fidelity detection and automation. This partnership enhances the implementation of zero trust by integrating modern SIEM capabilities and reducing the time and cost associated with data management and threat response. Harmon also emphasizes the evolution of SOAR platforms, like Tines, which eliminate the need for extensive programming expertise, thereby empowering analysts to automate workflows efficiently, making zero trust adoption more accessible and effective.