Sign In

Chris Lafleur

BD-CyberRisk Program and Partnerships

Chris Lafleur is a Business Development Strategist at Trend Micro. He has a background in incident response and threat support, having started his career at Trend Micro in Threat Support before leading the Incident Response team.5 Lafleur is involved in discussing cybersecurity strategies and has contributed to topics such as the Rhysida ransomware attack on the healthcare sector.13 He is based in Frisco, Texas, and has a strong professional network with over 2,000 followers on LinkedIn.4 Prior to his current role, he was a Senior Global Incident Response Program Manager at Trend Micro.12

Highlights

Aug 30 · linkedin

If you are in Louisiana this September 11th. Come stop by

#defconAcadiana

Jul 25 · linkedin

People often ask me what we can do about cyber events.

My answer is simple: I ask questions about how their systems are built and set up, and what their plans are if something goes down. As not being prepared is prepared to fail.

I feel this should be something #cyberinsruers should be looking as well!

What I do find interesting is that many people think they understand how Zero Trust Network (secure) Access (ZTNA/ZTSA) works, when in reality, they don't. ZTNA requires integration with a Security Information and Event Management (SIEM) or Security Orchestration, Automation, and Response (SOAR) platform, which, let's be honest, is likely not set up correctly anyway. This is one reason why Extended Detection and Response (XDR) is gaining traction in the market.

Look, ZTNA/ZTSA requires a few key components to work correctly. You need a negotiator in the middle, rules to inspect traffic at the packet level (not just at a trust connection level, which would be similar to a VPN), and an agent feeding intelligence back to the central broker managing access. In most environments, this would be the SIEM/SOAR. As soon as something goes outbound and violates a rule, you need to take steps to disconnect the user or notify the security team.

There isn't a single product you can purchase to do all this, but what I find impressive is what Trend Micro has built. With the Vision One product line, you can enable ZTNA as soon as the EDR agent is deployed.

Worried about your Hyper-V and ESX hosts being attacked? ZTNA stops the management networks from being exposed to everyone on the network.

Want to prevent Susie from accessing the entire network while traveling? With ZTNA, there's no need for a VPN; you can limit access to specific apps.

What happens when Bob gets his credentials phished? With ZTNA, he's unlikely to log into Office 365 from an unknown machine. Access is revoked automatically, the breach is contained within seconds, and the help desk can assist in getting him back to safety.

ZTNA/ZTSA is the VPN killer. In a few years, VPNs will be seen as a legacy network no-no.

Sources:

  1. Understanding ZTNA and its Integration with SIEM/SOAR:

    • "Zero Trust Network Access (ZTNA): What is it and How Does it Work?" - Gartner
  2. Extended Detection and Response (XDR) Gaining Traction:

    • "The Rise of XDR: Why It's the Future of Cybersecurity" - Forrester
  3. Trend Micro Vision One Product Line:

    • "Trend Micro Vision One: Extended Detection and Response (XDR) Security" - Trend Micro
  4. ZTNA vs. VPN:

Related Questions

What are Chris Lafleur's main responsibilities at Trend Micro?
How has Chris Lafleur contributed to Trend Micro's incident response efforts?
What is Chris Lafleur's background before joining Trend Micro?
How does Chris Lafleur's role impact Trend Micro's cybersecurity strategies?
What are some notable projects Chris Lafleur has worked on at Trend Micro?
Chris Lafleur
Chris Lafleur, photo 1
Chris Lafleur, photo 2
Add to my network

Location

Frisco, Texas, United States