---
title: Why Conventional Wisdom for Zero Trust Security Falls Short
description: Conventional cybersecurity wisdom has brought us this far, but we now have to think differently about Zero Trust security.
image: https://www.virtru.com/hubfs/Imported_Blog_Media/Conventional-Wisdom-Falls-Short-Blog.jpg
---

[Skip to Main Content](https://www.virtru.com/blog/zero-trust/security-advice#main-content)

[Sign In](https://secure.virtru.com/dashboard) [I received a Virtru email](https://www.virtru.com/data-protection-platform/email-encryption/send)

[![Virtru](https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE.svg) ](https://www.virtru.com/)

- Products
- Solutions
- Developers
- Company
- Resources
- [Support](https://support.virtru.com)
- [Pricing](https://www.virtru.com/data-security-platform/pricing-packages)
- Book a Demo
- Search all Virtru content
  
  ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg)

Email Workflows

Protect data shared via email

- [Virtru for Gmail 
  
  ](https://www.virtru.com/data-security-platform/email-encryption/gmail)
- [Virtru for Outlook 
  
  ](https://www.virtru.com/data-security-platform/email-encryption/outlook)
- [Virtru Gateway 
  
  ](https://www.virtru.com/data-security-platform/virtru-data-gateway)
- [Email Integrations 
  
  ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email)

File Workflows

Protect files shared across your workflows

- [Virtru Secure Share 
  
  ](https://www.virtru.com/data-security-platform/virtru-secure-share)
- [Virtru for Desktop 
  
  ](https://www.virtru.com/data-security-platform/desktop)
- [File Integrations 
  
  ](https://www.virtru.com/products/integrations?category=file_sharing)

Collaboration Workflows

FedRAMP authorized file storage and collaboration

- [Virtru Collaborate 
  
  ](https://www.virtru.com/data-security-platform/virtru-collaborate)

Manage Private Encryption Keys

Maintain complete sovereignty and governance

- [Virtru Private Keystore 
  
  ](https://www.virtru.com/data-security-platform/virtru-private-keystore)
- [Google Client Side Encryption (CSE) 
  
  ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption)

Develop Data Security Solutions

Data-centric security, built on open standards

- [Virtru Data Security Platform 
  
  ](https://www.virtru.com/data-security-platform)
- [Developer Experience 
  
  ](https://www.virtru.com/data-security-platform/developer-experience)
- [Platform Integrations 
  
  ](https://www.virtru.com/partners/technology)

6,100+ Customers Trust Virtru for Data Security and Privacy Protection

![Omada Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/omada-logo.webp) ![UC Berkley Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/ucberkley-logo.webp) ![Associated Press Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/associatedpress-logo.webp) ![US Department of Defense Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/dod-logo.webp)

- Compliance
  
    - [CJIS 
      
      ](https://www.virtru.com/compliance/cjis)
    - [CMMC / NIST / DFARS 
      
      ](https://www.virtru.com/compliance/cmmc)
    - [FERPA 
      
      ](https://www.virtru.com/compliance/ferpa)
    - [FTC Safeguards Rule 
      
      ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule)
    - [GDPR 
      
      ](https://www.virtru.com/compliance/gdpr)
    - [HIPAA 
      
      ](https://www.virtru.com/compliance/hipaa-email)
    - [ISO 27001 
      
      ](https://www.virtru.com/compliance/iso-27001)
    - [ITAR 
      
      ](https://www.virtru.com/compliance/itar)
    - [PCI / GLBA / FINRA / SOX 
      
      ](https://www.virtru.com/compliance/financial)
- Commercial
  
    - [Aerospace 
      
      ](https://www.virtru.com/industry-solutions/aerospace-and-defense/)
    - [Education 
      
      ](https://www.virtru.com/industry-solutions/education/)
    - [Finance 
      
      ](https://www.virtru.com/industry-solutions/financial-services/)
    - [Healthcare 
      
      ](https://www.virtru.com/industry-solutions/healthcare/)
    - [Legal 
      
      ](https://www.virtru.com/industry-solutions/legal)
    - [Technology & Telecom 
      
      ](https://www.virtru.com/industry-solutions/telecom-it-and-software)
    - [Threat Intelligence 
      
      ](https://www.virtru.com/industry-solutions/threat-intelligence)
- Global Public Sector
  
    - [Federal - Defense 
      
      ](https://www.virtru.com/global-public-sector/defense)
    - [Federal - Intelligence 
      
      ](https://www.virtru.com/global-public-sector/intelligence)
    - [State & Local Government 
      
      ](https://www.virtru.com/industry-solutions/state-local-government)
    - [Systems Integrators 
      
      ](https://www.virtru.com/global-public-sector/systems-integrators)
    - [Mission Partner Environments 
      
      ](https://www.virtru.com/industry-solutions/mission-partner-environments)

[View All Solutions](https://www.virtru.com/compliance)

[![Three rings forming three overlaps in a triangle formation](https://www.virtru.com/hubfs/assets/images/icons/rings-navicon.svg)

Virtru for Global Mission Partners

Data-centric security aligned with ACP-240 and TDF

Learn More ](https://www.virtru.com/industry-solutions/mission-partner-environments) [![Microsoft Icon](https://www.virtru.com/hubfs/assets/images/icons/microsoft-navicon.svg)

Virtru for Microsoft 365

Protect data stored and shared via Microsoft 365

Learn More ](https://www.virtru.com/data-security-platform/microsoft-365) [![Google Icon](https://www.virtru.com/hubfs/assets/images/icons/google-navicon.svg)

Virtru for Google Workspace

Protect data stored and shared via Google Workspace

Learn More ](https://www.virtru.com/data-security-platform/google-workspace)

- Developers
  
    - [Virtru Data Security Platform The Security Standard that Powers Our Products 
      
      ](https://www.virtru.com/data-security-platform)
    - [Trusted Data Format Secure Collaboration and Policy Enforcement 
      
      ](https://www.virtru.com/data-security-platform/trusted-data-format)
    - [Virtru Developer Experience Build Secure Solutions from the Ground Up 
      
      ](https://www.virtru.com/data-security-platform/developer-experience)
- Developer Community
  
    - [OpenTDF: Open Source Project Open Standard Now Available on GitHub 
      
      ](https://opentdf.io/)
    - [Technology Partners Building integrations with the Virtru Platform 
      
      ](https://www.virtru.com/partners/technology)
    - [Partner Training Bootcamp Request training on the Virtru Data Security Platform 
      
      ](https://www.virtru.com/data-security-platform/training-request)

![Looking over the shoulder of somebody on their smart phone. ](https://www.virtru.com/hubfs/assets/images/stock%20photos/People%20On%20Device/person-on-phone.webp)

A trusted platform for secure data sharing

Built on the open TDF standard, the Virtru Data Security Platform provides persistent control over the information you share with others.

[Virtru Data Security Platform](https://www.virtru.com/data-security-platform)

- About Virtru
  
    - [About Us 
      
      ](https://www.virtru.com/about-us)
    - [Leadership 
      
      ](https://www.virtru.com/leadership/)
    - [Careers & Culture 
      
      ](https://www.virtru.com/careers)
    - [Contact Us 
      
      ](https://www.virtru.com/contact-us)
- In the News
  
    - [Headlines & Press Releases 
      
      ](https://www.virtru.com/newsroom)
    - [Decrypted Blog 
      
      ](https://www.virtru.com/blog)
    - [Hash It Out Podcast 
      
      ](https://www.virtru.com/hash-it-out)

Award-winning security solutions for every organization

![Cyber Security Breakthrough Award Logo for 2023](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/cybersecurity-breakthrough-award-badge-2023.webp) ![Virtru wins a G2 Top 50 Security Products Award for 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/G2-Leader-2025.webp) ![Washington Post Top Work Places 2023 Award](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/twp-washington-2023.webp) ![Inc Power Partner 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/IncPowerPartner-2024.webp) 

[Read Customer Reviews](https://www.virtru.com/why-virtru/reviews)

- Resources
  
    - [Decrypted Blog Tips, Takes, and Expertise 
      
      ](https://www.virtru.com/blog)
    - [Hash It Out Podcast Join us as we talk about cybersecurity 
      
      ](https://www.virtru.com/hash-it-out)
    - [Voice of the Customer Case Studies, Webinars, and Videos 
      
      ](https://www.virtru.com/resources?type=webinar,case-study)
    - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars 
      
      ](https://www.virtru.com/events-and-webinars/)
    - [Resource Library Whitepapers, Guides, and Videos 
      
      ](https://www.virtru.com/resources)
    - [DMV Rising Our annual event bringing together the cyber community in the DMV 
      
      ](https://dmvrising.com/)
    - [Headlines & Press Virtru in the News 
      
      ](https://www.virtru.com/newsroom)
    - [Product Updates The latest on new products, features, and fixes 
      
      ](https://www.virtru.com/products/updates)
    - [Virtru Academy Live Helpful how-to content for admins and end users 
      
      ](https://www.virtru.com/virtru-academy-live)

![Professional on a laptop](https://www.virtru.com/hubfs/assets/images/stock%20photos/business/Business-3.webp)

![Wealthforge Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/Wealthforge%20Logo.webp)

100% Increase in delivery rate for a broker-dealer working to comply with SEC regulations.

[Read the Case Study](https://www.virtru.com/case-studies/wealthforge-sec-compliance-gateway)

- Products 
  
    - Email Workflows
      
      Protect data shared via email
      
          - [Virtru for Gmail 
            
            ](https://www.virtru.com/data-security-platform/email-encryption/gmail)
          - [Virtru for Outlook 
            
            ](https://www.virtru.com/data-security-platform/email-encryption/outlook)
          - [Virtru Gateway 
            
            ](https://www.virtru.com/data-security-platform/virtru-data-gateway)
          - [Email Integrations 
            
            ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email)
    - File Workflows
      
      Protect files shared across your workflows
      
          - [Virtru Secure Share 
            
            ](https://www.virtru.com/data-security-platform/virtru-secure-share)
          - [Virtru for Desktop 
            
            ](https://www.virtru.com/data-security-platform/desktop)
          - [File Integrations 
            
            ](https://www.virtru.com/products/integrations?category=file_sharing)
    - Collaboration Workflows
      
      FedRAMP authorized file storage and collaboration
      
          - [Virtru Collaborate 
            
            ](https://www.virtru.com/data-security-platform/virtru-collaborate)
    - Manage Private Encryption Keys
      
      Maintain complete sovereignty and governance
      
          - [Virtru Private Keystore 
            
            ](https://www.virtru.com/data-security-platform/virtru-private-keystore)
          - [Google Client Side Encryption (CSE) 
            
            ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption)
    - Develop Data Security Solutions
      
      Data-centric security, built on open standards
      
          - [Virtru Data Security Platform 
            
            ](https://www.virtru.com/data-security-platform)
          - [Developer Experience 
            
            ](https://www.virtru.com/data-security-platform/developer-experience)
          - [Platform Integrations 
            
            ](https://www.virtru.com/partners/technology)
- Solutions 
  
    - Compliance
      
          - [CJIS 
            
            ](https://www.virtru.com/compliance/cjis)
          - [CMMC / NIST / DFARS 
            
            ](https://www.virtru.com/compliance/cmmc)
          - [FERPA 
            
            ](https://www.virtru.com/compliance/ferpa)
          - [FTC Safeguards Rule 
            
            ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule)
          - [GDPR 
            
            ](https://www.virtru.com/compliance/gdpr)
          - [HIPAA 
            
            ](https://www.virtru.com/compliance/hipaa-email)
          - [ISO 27001 
            
            ](https://www.virtru.com/compliance/iso-27001)
          - [ITAR 
            
            ](https://www.virtru.com/compliance/itar)
          - [PCI / GLBA / FINRA / SOX 
            
            ](https://www.virtru.com/compliance/financial)
    - Commercial
      
          - [Aerospace 
            
            ](https://www.virtru.com/industry-solutions/aerospace-and-defense/)
          - [Education 
            
            ](https://www.virtru.com/industry-solutions/education/)
          - [Finance 
            
            ](https://www.virtru.com/industry-solutions/financial-services/)
          - [Healthcare 
            
            ](https://www.virtru.com/industry-solutions/healthcare/)
          - [Legal 
            
            ](https://www.virtru.com/industry-solutions/legal)
          - [Technology & Telecom 
            
            ](https://www.virtru.com/industry-solutions/telecom-it-and-software)
          - [Threat Intelligence 
            
            ](https://www.virtru.com/industry-solutions/threat-intelligence)
    - Global Public Sector
      
          - [Federal - Defense 
            
            ](https://www.virtru.com/global-public-sector/defense)
          - [Federal - Intelligence 
            
            ](https://www.virtru.com/global-public-sector/intelligence)
          - [State & Local Government 
            
            ](https://www.virtru.com/industry-solutions/state-local-government)
          - [Systems Integrators 
            
            ](https://www.virtru.com/global-public-sector/systems-integrators)
          - [Mission Partner Environments 
            
            ](https://www.virtru.com/industry-solutions/mission-partner-environments)
- Developers 
  
    - Developers
      
          - [Virtru Data Security Platform The Security Standard that Powers Our Products 
            
            ](https://www.virtru.com/data-security-platform)
          - [Trusted Data Format Secure Collaboration and Policy Enforcement 
            
            ](https://www.virtru.com/data-security-platform/trusted-data-format)
          - [Virtru Developer Experience Build Secure Solutions from the Ground Up 
            
            ](https://www.virtru.com/data-security-platform/developer-experience)
    - Developer Community
      
          - [OpenTDF: Open Source Project Open Standard Now Available on GitHub 
            
            ](https://opentdf.io/)
          - [Technology Partners Building integrations with the Virtru Platform 
            
            ](https://www.virtru.com/partners/technology)
          - [Partner Training Bootcamp Request training on the Virtru Data Security Platform 
            
            ](https://www.virtru.com/data-security-platform/training-request)
- Company 
  
    - About Virtru
      
          - [About Us 
            
            ](https://www.virtru.com/about-us)
          - [Leadership 
            
            ](https://www.virtru.com/leadership/)
          - [Careers & Culture 
            
            ](https://www.virtru.com/careers)
          - [Contact Us 
            
            ](https://www.virtru.com/contact-us)
    - In the News
      
          - [Headlines & Press Releases 
            
            ](https://www.virtru.com/newsroom)
          - [Decrypted Blog 
            
            ](https://www.virtru.com/blog)
          - [Hash It Out Podcast 
            
            ](https://www.virtru.com/hash-it-out)
- Resources 
  
    - Resources
      
          - [Decrypted Blog Tips, Takes, and Expertise 
            
            ](https://www.virtru.com/blog)
          - [Hash It Out Podcast Join us as we talk about cybersecurity 
            
            ](https://www.virtru.com/hash-it-out)
          - [Voice of the Customer Case Studies, Webinars, and Videos 
            
            ](https://www.virtru.com/resources?type=webinar,case-study)
          - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars 
            
            ](https://www.virtru.com/events-and-webinars/)
          - [Resource Library Whitepapers, Guides, and Videos 
            
            ](https://www.virtru.com/resources)
          - [DMV Rising Our annual event bringing together the cyber community in the DMV 
            
            ](https://dmvrising.com/)
          - [Headlines & Press Virtru in the News 
            
            ](https://www.virtru.com/newsroom)
          - [Product Updates The latest on new products, features, and fixes 
            
            ](https://www.virtru.com/products/updates)
          - [Virtru Academy Live Helpful how-to content for admins and end users 
            
            ](https://www.virtru.com/virtru-academy-live)
- [Support](https://support.virtru.com)
- [Pricing](https://www.virtru.com/data-security-platform/pricing-packages)
- Book a Demo
- Search all Virtru content
  
  ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg)

Public Sector. Defense.

April 23, 2022

# Why Conventional Wisdom for Zero Trust Security Falls Short

![Matt Howard](https://www.virtru.com/hubfs/assets/images/events/Above%20and%20Beyond%20the%20Cloud%202023/Speaker%20Headshots/Hubspot%20Images/Google-AboveTheCloud-Headshot-Matt.png)

By Matt Howard

Share post:

[![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Why%20Conventional%20Wisdom%20for%20Zero%20Trust%20Security%20Falls%20Short)

## TABLE OF CONTENTS

See Virtru In Action

Book a Demo

Share post:

[![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fzero-trust%2Fsecurity-advice%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Why%20Conventional%20Wisdom%20for%20Zero%20Trust%20Security%20Falls%20Short)

![Photo of a dartboard with several darts stuck in it](https://www.virtru.com/hubfs/Imported_Blog_Media/Conventional-Wisdom-Falls-Short-Blog.jpg) ![](https://www.virtru.com/hubfs/assets/images/blog/overlays/blog-overlay-commentary.png)

Zero Trust security transformation. Why is everyone talking about it? Because we now live and work in a digital world without walls. And, without walls, cyber leaders must rethink their entire strategy for defending businesses against attacks and securing valuable data.

But what exactly are people saying about Zero Trust? And, more importantly, what aren’t they saying? What critical points might be missing from the current Zero Trust conversation?

Conventional cybersecurity wisdom has brought us this far, but in order to adapt to a rapidly escalating threat landscape, we have to think differently. We have to think beyond the status quo.

## Old Habits Die Hard

The rapid adoption of public cloud infrastructure means that most companies have migrated some, or all, of their IT operations to the cloud. Furthermore, the global pandemic has fundamentally changed the nature of work itself, which now requires every IT department to support remote-first operations. Simply stated, the IT perimeter has vanished – and with it, the proverbial castle wall. Thus, companies everywhere are actively rethinking their approach to cyber security.

But, old habits die hard.

Despite living in a world without walls, most cyber professionals today still have perimeter-centric thoughts defining their priorities and guiding their actions. As a result, they tend to focus a majority of their time and energy on one thing: keeping bad guys off their networks and out of their systems. They do this by investing heavily to implement identity-based perimeters, complete with single sign-on and multi-factor authentication. They invest further to strengthen endpoint security. They dig even deeper into their pockets to implement best-in-class network security solutions and services like cloud access security brokers (CASB) in an attempt to bring SaaS apps inside of virtual perimeter. In other words, at this early stage of the Zero Trust security transformation journey, the prevailing cybersecurity mindset is still focused on defending the ever-expanding [digital attack surface](https://www.okta.com/identity-101/what-is-an-attack-surface/) from external threats – rather than securing sensitive data objects which live on the [digital protect surface](https://docs.paloaltonetworks.com/best-practices/9-0/zero-trust-best-practices/zero-trust-best-practices/the-five-step-methodology/step-1-define-your-protect-surface#:~:text=Identify%20data%2C%20applications%2C%20assets%2C,to%20ensure%20normal%20business%20operation.).

## Conventional Wisdom Falls Short

In the modern economy, organizations that are able to collect, analyze, and mine massive amounts of data have a huge advantage over their competitors and a clear path to rapid growth and value creation. However, these same companies that possess massive amounts of sensitive data must contend with huge overhead costs, including regulatory compliance, engineering operations, security risk management, and the enormous obligation that comes with being trusted to protect sensitive and private information about customers, employees, and business partners.

Furthermore, because data is the lifeblood of every business, organizations find themselves constantly sharing it with others, with or without proper controls. Similarly, companies must accommodate the fact that sensitive data, owned by others, is frequently being shared with them.

Today, conventional wisdom advocates that cyber leaders focus first and foremost on defending the digital attack surface from external threats. Such thinking isn’t wrong. It’s just a bit myopic, because it diminishes the critical importance of securing the data itself, which flows constantly in and out of your digital protect surface.

## Thinking Outside of the Zero Trust Box

Against this backdrop, cyber security leaders would be well served to expand their Zero Trust thinking beyond conventional wisdom and simply defending their ever expansive attack surface. They should challenge themselves and their teams to examine innovative solutions designed to secure an organization’s protect surface where sensitive data actually lives and breathes, flowing in and out of businesses on a daily basis.

A convenient way for cyber security leaders to think beyond conventional wisdom is to ask themselves and their teams three critical questions:

1. How should we govern sensitive data that we own and possess internally?
2. How should we govern sensitive data that we own, but no longer possess internally because we’ve shared it externally?
3. How should we govern sensitive data that has been shared with us, but is owned by others?

## Zero Trust Data Access (ZTDA) for Inbound Workflows

Conventional wisdom on Zero Trust Data Access (ZTDA) advises a five-pronged approach to governing risk:

- First, use micro-segmentation in datacenters and cloud environments to separate workloads.
- Next, embrace the principle of least privilege to allow each user to access only the data they need.
- Third, apply role-based access controls (RBACs) to make sure the right people have access to the right data.
- Then, leverage Security Assertion Markup Language (SAML) and single sign-on (SSO) to reduce the prevalence of passwords and insecure user behavior.
- And finally, take advantage of multi factor authentication (MFA) to further strengthen authentication and authorization.

Indeed, if your sole mission is to govern sensitive data that your organization owns and possesses internally – then it makes sense to follow conventional wisdom and invest all of your time and energy into governing which people and devices can access which data over a virtually secure network via inbound workflows.

## Zero Trust Data Control (ZTDC) for Dynamic Workflows

Unfortunately, data isn’t static. It’s dynamic, constantly moving and evolving — born to be free in order to maximize its potential to shape strategies and inform important decisions. You can’t afford to lock it away. And you can’t afford to lose control of it either.

Thus, if your mission is to govern the entire protect surface and all forms of sensitive data, including data shared externally with third parties, then it is a good idea to think outside of the proverbial box. To do this, you will want to examine Zero Trust controls like Trusted Data Format (TDF) which is well-suited to facilitating secure collaboration, so you can guarantee access ONLY by intended identities, even when data has been shared externally.

## Think Different – Say Hello to the Trusted Data Format

TDF is a super fast and affordable way for any organization to expand their zero trust security controls to encompass common information assets, like emails and files, which frequently contain sensitive and risky data.

TDF leverages military-grade data encryption to wrap data objects in a layer of security that remains with the data wherever it flows. We call this approach Zero Trust Data Control (ZTDC), because it gives you complete control over your data at all times – even after it has left your organization. You retain ownership and control for as long as the data exists, so you can always ensure access only by intended entities.

The graphic below shows how this works. The right hand side represents the conventional part of the zero trust wisdom as follows: identity and endpoint controls coupled with secure networks work in concert to determine which people and devices can access which apps and data with least privilege.

But the real power is on the left — and this is the essential part of the Zero Trust strategy that is often missing from conventional thinking. These are your collaboration and outbound workflows, and this is where TDF-based solutions give you a unique ability to minimize risk by securing granular pieces of data moving dynamically in and out of your business via emails, files, and SaaS applications. You can apply policy, attach identity, encrypt the data, authenticate and authorize the intended recipient, easily decrypt the data, and maintain control wherever the data flows and for as long as the data exists.

![An infinity chart shows the Virtru Zero Trust Advantage](https://www.virtru.com/hs-fs/hubfs/Imported_Blog_Media/Screen-Shot-2022-04-23-at-1_18_43-PM-1024x527.png?width=1024&height=527&name=Screen-Shot-2022-04-23-at-1_18_43-PM-1024x527.png)

In this way, TDF compliments and extends your existing zero trust initiatives. It does so by creating a continuous, virtuous circle of policy control where you can enable your organization to collaborate with others and easily conduct business without ever losing control of sensitive information.

With TDF-based solutions, users can simply click a button to safely share sensitive data via email and files. Further, your organization can safely move customer data in and out of mission-critical software-as-a-service (SaaS) applications. Finally, TDF can easily help you govern data flowing to and from a vast array of IoT devices.

As cyber risk continues to grow exponentially, Zero Trust security transformations will only become a greater imperative. TDF-based solutions enable you to [maintain Zero Trust Data Control](https://www.virtru.com/blog/zero-trust-cybersecurity-government/) over both your inbound and your outbound workflows – safeguarding the entirety of your protect surface and equipping you to share data with confidence.

![Matt Howard](https://www.virtru.com/hubfs/assets/images/events/Above%20and%20Beyond%20the%20Cloud%202023/Speaker%20Headshots/Hubspot%20Images/Google-AboveTheCloud-Headshot-Matt.png)

### Matt Howard

A proven executive and entrepreneur with over 25 years experience developing high-growth software companies, Matt serves as Virtru’s CMO and leads all aspects of the company’s go-to-market motion within the data protection and Zero Trust security ecosystems.

[View more posts by Matt Howard](https://www.virtru.com/blog/author/matt-howard)

See Virtru In Action

Book a Demo

Sign Up for the Virtru Newsletter

## Dive Deeper

![](https://www.virtru.com/hubfs/assets/images/icons/left-arrow-circle-blue.webp)

[![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cyera%20oasis/cyera-oasis.webp)

Commentary

July 29, 2026

### The Coin Has Two Sides: What Cyera's Acquisition of Oasis Tells Us About the Future of Security

](https://www.virtru.com/blog/data-centric-security/cyera-oasis) [![](https://www.virtru.com/hubfs/26-Competitor-Blog%20-%20Virtru%20vs%20Box%20copy.webp)

File Encryption

July 28, 2026

### Virtru Collaborate vs. Box: Secure File Sharing for Businesses of Any Size

](https://www.virtru.com/blog/virtru-collaborate-vs-box-enterprise) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20william%20mcborrough%20recap/cmmc-compass-will-mcborrough.webp)

Compliance

July 22, 2026

### The $600,000 Problem: What the CMMC Pause Actually Revealed About the Defense Industrial Base

](https://www.virtru.com/blog/compliance/mcglobaltech-cmmc-compass) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20three%20stories/three-stories.webp)

Zero Trust

July 21, 2026

### Last Week in Critical Infrastructure: Three Stories You Should Read as One

](https://www.virtru.com/blog/data-centric-security/three-stories-converge) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cmmc%20on%20hold/CMMC-Pause-CUI-Not.webp)

Public Sector

July 14, 2026

### CMMC Phase II Is Officially on Hold. NIST and DFARS aren't.

](https://www.virtru.com/blog/compliance/cmmc-phase-2-on-hold-nist-dfars) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/2026%20Newsletter%20Assets/jk-HIO.png)

Zero Trust

July 10, 2026

### We Asked Kindervag: Why Are So Many Organizations Still Getting Zero Trust Wrong?

](https://www.virtru.com/blog/zero-trust/kindervag-yeske) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20ShareFile%20Takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Sharefile.jpg)

File Encryption

July 10, 2026

### Looking for a ShareFile Alternative? Here's What Regulated Organizations Need to Know.

](https://www.virtru.com/blog/file-encryption/citrix-progress-sharefile) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20sendsafely%20takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20SendSafely%20(1).jpg)

File Encryption

July 08, 2026

### SendSafely vs. Virtru: Which Secure File Sharing Platform Protects Your Data After Download?

](https://www.virtru.com/blog/file-encryption/sendsafely) [![](https://www.virtru.com/hubfs/assets/images/blog/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Dropbox.webp)

File Encryption

July 07, 2026

### Dropbox Alternatives for Secure File Sharing: What IT Teams Are Missing

](https://www.virtru.com/blog/dropbox-alternatives-secure-file-sharing) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20alex%20karp/alex-karp.jpg)

Commentary

July 07, 2026

### Alex Karp Is Right About the AI Problem. He's Missing the Solution.

](https://www.virtru.com/blog/zero-trust/alex-karp-palantir-data-sovereignty) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20SACR%20Report/anna-perrone-commentary%20copy.webp)

Email Encryption

June 29, 2026

### The Email Security Report Every CISO Should Read, And the Questions It Should Inspire

](https://www.virtru.com/blog/email-security/sacr-anna-perrone-report-2026)

![](https://www.virtru.com/hubfs/assets/images/icons/right-arrow-circle-blue.webp)

## Book a Demo

## Become a Partner

Contact us to learn more about our partnership opportunities.

## Become a Compliance Champion

Contact us to learn more about our partnership opportunities.

- Products
  
    - [Product Overview](https://www.virtru.com/data-security-platform/product-overview)
    - [Virtru for Google Workspace](https://www.virtru.com/data-security-platform/google-workspace)
    - [Virtru for Microsoft 365](https://www.virtru.com/data-security-platform/microsoft-365)
    - [Data Protection Gateway](https://www.virtru.com/data-security-platform/virtru-data-gateway)
    - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages)
- Compliance
  
    - [HIPAA](https://www.virtru.com/compliance/hipaa-email)
    - [ITAR](https://www.virtru.com/compliance/itar)
    - [GDPR](https://www.virtru.com/compliance/gdpr)
    - [CJIS](https://www.virtru.com/compliance/cjis)
    - [NIST CUI](https://www.virtru.com/compliance/nist)
    - [CCPA](https://www.virtru.com/compliance/ccpa)
    - [FERPA](https://www.virtru.com/compliance/ferpa)
    - [CMMC](https://www.virtru.com/compliance/cmmc)
- Industries
  
    - [Healthcare](https://www.virtru.com/industry-solutions/healthcare/)
    - [Education](https://www.virtru.com/industry-solutions/education/)
    - [IT & Software](https://www.virtru.com/industry-solutions/telecom-it-and-software)
    - [Federal Government](https://www.virtru.com/global-public-sector)
    - [State & Local Government](https://www.virtru.com/industry-solutions/state-local-government)
    - [Manufacturing](https://www.virtru.com/industry-solutions/manufacturing)
    - [Financial Services](https://www.virtru.com/industry-solutions/financial-services/)
- Platform
  
    - [Email Encryption](https://www.virtru.com/data-security-platform/email-encryption)
    - [File Encryption](https://www.virtru.com/data-security-platform/file-encryption)
    - [Platform Architecture](https://www.virtru.com/data-security-platform/saas)
    - [Trusted Data Format](https://www.virtru.com/data-security-platform/trusted-data-format)
    - [Secure Reader](https://www.virtru.com/data-security-platform/secure-collaboration)
    - [Audit and Control](https://www.virtru.com/data-security-platform/audit-and-control)
    - [Encryption Key Management](https://www.virtru.com/data-security-platform/virtru-private-keystore)
- Resources
  
    - [About Virtru](https://www.virtru.com/about-us)
    - [Blog](https://www.virtru.com/blog)
    - [Careers](https://www.virtru.com/careers)
    - [Leadership & Investors](https://www.virtru.com/leadership/)
    - [News & Press](https://www.virtru.com/press)
    - [Partners](https://www.virtru.com/partners/)
    - [Intellectual Property](https://www.virtru.com/intellectual-property/)
    - [Security Certifications](https://www.virtru.com/data-security-platform/compliance)
    - Resource Library
- Contact Us
  
    - [Contact Us](https://www.virtru.com/contact-us)
    - [Support](https://support.virtru.com/)
    - [Sales](https://www.virtru.com/contact-us)
    - [Become a Partner](https://www.virtru.com/blog/zero-trust/security-advice#footer)
    - [Report a Vulnerability](https://www.virtru.com/responsible-disclosure/)

[![Virtur Logo](https://www.virtru.com/hubfs/assets/images/logos/virtru/white/tagline/virtru_TAGLINE_LOGOMASTER_WHITE-01.svg)](https://www.virtru.com/)

Subscribe to Our Newsletter

[![X Icon](https://www.virtru.com/hubfs/assets/images/icons/x-white.svg)](https://x.com/virtruprivacy) [![LinkedIn Icon](https://www.virtru.com/hubfs/assets/images/icons/linkedin-white.svg)](https://www.linkedin.com/company/virtru) [![Youtube Icon](https://www.virtru.com/hubfs/assets/images/icons/youtube-white.svg)](https://www.youtube.com/@Virtru)

© 2026 Virtru · 1801 Pennsylvania Ave NW, 5th Floor, Washington, DC 20006

[Terms](https://www.virtru.com/terms-of-service) & [Privacy](https://www.virtru.com/privacy-policy) | [Cookie Policy](https://www.virtru.com/cookie-policy) & [Preferences ![Pivacy Options logo](https://oag.ca.gov/sites/all/files/agweb/images/privacy/privacyoptions.svg)](https://www.virtru.com/blog/zero-trust/security-advice#footer) | [Do Not Sell My Personal Information](https://www.virtru.com/blog/zero-trust/security-advice#footer) | [Virtru Trust Center](https://trust.virtru.com/?_ga=2.215796503.1200908638.1747067694-1753239414.1744322796&_gac=1.175361302.1744660048.EAIaIQobChMIppzvranJjAMVN0pHAR3F7gNdEAAYAiAAEgL4qfD_BwE)

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.virtru.com/#organization",
  "@type" : "Organization",
  "description" : "Virtru is a data security platform delivering end-to-end encryption and access control for email, files and apps. Trusted by enterprise and defense leaders",
  "logo" : "https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE_HighRes.png",
  "name" : "Virtru",
  "sameAs" : [ "https://www.facebook.com/virtruprivacy", "https://www.x.com/virtruprivacy", "https://www.linkedin.com/company/virtru", "https://www.reddit.com/user/virtru_privacy", "https://www.youtube.com/@Virtru" ],
  "url" : "https://www.virtru.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Matt Howard",
    "url" : "https://www.virtru.com/blog/author/matt-howard"
  },
  "dateModified" : "2025-02-25T16:55:11.288Z",
  "datePublished" : "2022-04-23T18:00:18.000Z",
  "headline" : "Why Conventional Wisdom for Zero Trust Security Falls Short",
  "image" : [ "https://www.virtru.com/hubfs/Imported_Blog_Media/Conventional-Wisdom-Falls-Short-Blog.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.virtru.com/blog/zero-trust/security-advice",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.virtru.com/hubfs/virtru2022/images/Virtru%20Logo%20Blue%20(2).svg"
    },
    "name" : "Virtru"
  }
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "ItemList",
  "itemListElement" : [ {
    "@type" : "SiteNavigationElement",
    "name" : "Products",
    "position" : 1
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Solutions",
    "position" : 2
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Developers",
    "position" : 3
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Company",
    "position" : 4
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Resources",
    "position" : 5
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Support",
    "position" : 6,
    "url" : "https://support.virtru.com"
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Pricing",
    "position" : 7
  } ],
  "name" : "Main Navigation"
}
```