--- title: Applying Data-centric Security Early in your Zero Trust Initiative description: In any Zero Trust initiative, protecting the data itself should be step 1 (or close to it). image: https://insights.comforte.com/hubfs/blog%20header%20image%20castle%20moutain%20view.jpeg --- [![Hubspot\_blog\_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe to comforte Insights](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![data-centric security for zero trust](https://insights.comforte.com/hubfs/blog%20header%20image%20castle%20moutain%20view.jpeg)](https://insights.comforte.com/applying-data-centric-security-early-in-your-zero-trust-initiative) [Trevor J. Morgan](https://insights.comforte.com/author/trevor-j-morgan) l Oct 12, 2021 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Zero Trust](https://insights.comforte.com/tag/zero-trust) # Applying Data-centric Security Early in your Zero Trust Initiative My [previous post in this series](https://insights.comforte.com/data-is-the-prize-the-pillars-of-zero-trust-from-another-perspective?hsLang=en) ended with a pretty definite statement: if data is all-important to hackers and other threat actors and is the crowning piece of the entire pillared structure that is the IT infrastructure, then that’s where you need to start you Zero Trust initiative. That’s what needs to be protected early on—your data. Once people grasp and then embrace the concept of Zero Trust—which at its core encourages removing all implicit trust based on network location or a single challenge—they quickly move on to thinking about implementing it. Naturally, excitement in implementing a new security paradigm that could greatly reduce an organization’s risk and mitigate the serious consequences of a data incident is going to trigger the next obvious question: where should we start? Let me be honest here. If you go to a car dealership to look at a new sports car and inquire where to start searching for the perfect sports car, the dealership representative will of course say, “let’s go out and look at what we have!” The same situation will occur with technology vendors and Zero Trust. Referring to the [US DoD reference architecture](https://dodcio.defense.gov/Portals/0/Documents/Library/(U)ZT_RA_v1.1(U)_Mar21.pdf) (and other assets discussing ZT), you will find numerous pillars from which to choose, including the big three: network, devices, and users. So go to a network security vendor and ask where to start, and you’ll get the expected answer, which is to look at what their solutions are. Therefore, as a representative of a technology vendor myself, I am painfully aware of the hypocrisy in stating that the starting point should be to look into comforte’s own data protection platform. I won’t do that—yet. What I will do is pick back up on that notion that threat actors only want your data (meaning, they don’t want your enterprise Wi-Fi router, because it’s just a stepping stone to your data). If threat actors are so intently focused on getting to your data, then the logical starting point should be data security with the security method applied directly to the data. OK, so how to do that? Again, various reference architectures might suggest data encryption, but even there you’re talking about a very broad solution area with lots of different flavors and variations. On top of that, I can note several problems, though, with data encryption as the ideal starting point for protecting the data itself: - Weaker encryption algorithms can be cracked - Encryption doesn’t preserve data format, which can cause headaches with your business applications - Encryption depends on keys, and key management is a pretty onerous task Remember, the ultimate objective is to protect the data itself by rendering it useless in the wrong hands. Another point to recall is that one of the basic premises of Zero Trust is to assume that a breach has already occurred, meaning that perimeter defenses have already failed and that a bad actor is actively working within your IT environment. When we protect the data itself, we assume that it will fall into the wrong hands eventually, but the outcome will not be severe because sensitive knowledge is in some way made incomprehensible. This brings to mind an analogy to show the power of protecting the thing of value instead of the environment around it. Think of any castle structure you’ve ever seen either in person, in books, in movies, or just in your imagination. I will picture Dover Castle in the UK, as it perfectly exemplifies the multiple layers of security applied to the structure. Just as with your IT infrastructure, castles had borders and guarded perimeters to try to keep unwanted people out. Whether body of water, outer stone walls, or entrenchments, castles were ringed with ways to isolate what was important (the people and assets being protected, meaning royalty and nobility usually) from any attacker on the outside. If an attacker could get through all of these outer perimeters, over a moat, across a drawbridge, and keep going all the way to the inner keep, then the prize was near, whether it was the Duke and Duchess or the King and Queen. Up winding stairs and into a throne room, and suddenly, nobody’s there! Maybe the castle you imagine has secret passageways allowing the Duke and Duchess or King and Queen to evacuate and get far from the castle before the invaders discovered the trick. Well, without the ultimate prize, the attack really wasn’t all that successful, was it? This is what data-centric security does to your data—turning the sensitive data elements into innocuous representational elements that make the data incomprehensible, so threat actors can’t leverage it for nefarious purposes. What kind of data-centric security can do this while also avoiding some of the pitfalls that come with data encryption? Well, tokenization comes to mind. A strong data protection platform with robust tokenization can ensure that your data itself is guarded, all while preserving data format and avoiding any need for key management. A tokenization solution like comforte’s can help you address that first step in your Zero Trust journey, which is to start protecting your enterprise data from falling into the wrong hands. If it does, it will be the same outcome as the castle invaders hoping to catch the King and Queen up in the castle keep when they’ve escaped out the back way: complete inability to leverage the successful attack through the perimeter defenses because the sensitive target has already been whisked away. More questions probably arise in your head, such as can we prove that starting with and investing into data protection first gets you a good way down the road toward Zero Trust? Come back for #4 as I talk about costs and benefits of different starting points, and the expected return on investment. --- | Share this: | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/applying-data-centric-security-early-in-your-zero-trust-initiative&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/applying-data-centric-security-early-in-your-zero-trust-initiative&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/applying-data-centric-security-early-in-your-zero-trust-initiative&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/applying-data-centric-security-early-in-your-zero-trust-initiative&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/applying-data-centric-security-early-in-your-zero-trust-initiative&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## This isn't the data you're looking for. Data-centric security renders sensitive data useless to potential attackers so even if it is accessed, it's in a state with no exploitable value. There are many cases where processes can be carried out on data while it's still in a protected state, allowing digital organizations to go about their business while keeping sensitive data safe. To learn more, check out our data protection platform solution brief:   [![Download Solution Brief](https://no-cache.hubspot.com/cta/default/4026697/7962e9ff-2c50-4207-910f-fc5fd97083e7.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/7962e9ff-2c50-4207-910f-fc5fd97083e7) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### EMEA comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Asia-Pacific comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### Americas comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Southeast Asia comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026