{"id":26034,"date":"2019-12-24T14:00:35","date_gmt":"2019-12-24T14:00:35","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2019\/12\/24\/dhs-updates-its-view-of-trust-in-new-network-security-guidance\/"},"modified":"2026-08-08T18:11:32","modified_gmt":"2026-08-08T18:11:32","slug":"dhs-updates-its-view-of-trust-in-new-network-security-guidance","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/12\/24\/dhs-updates-its-view-of-trust-in-new-network-security-guidance\/","title":{"rendered":"DHS updates its view of trust in new network security guidance"},"content":{"rendered":"\n

New Department of Homeland Security<\/a> draft guidance<\/a> on an updated version of the federal government\u2019s external network security program takes a new approach to trust, moving toward a more \u201cnuanced\u201d view to allow for flexibility across different agencies\u2019 mission areas.<\/p>\n\n\n\n

The draft guidance, released for public comment Dec. 20 by Homeland Security\u2019s Cybersecurity and Infrastructure Security Agency, outlines significant changes to the Trusted Internet Connections program, which secures federal agencies\u2019 external network connections, as federal agencies continue to add remote users and move parts of their network into the cloud. The draft documents, released in five volumes, are out for comment from Dec. 23 to Jan. 31, 2020.<\/p>\n\n\n\n

CISA wrote in the draft that, under the new TIC, the government is ditching old documents that established a \u201cstrictly-defined\u201d approach to trust, instead taking an approach that \u201crecognizes the reality that the definition of \u2018trust\u2019 may vary across specific computing contexts.”<\/p>\n\n\n\n

The new approach to trust is a significant change in the broad TIC 3.0 plan aimed at revising the federal government\u2019s cybersecurity framework focus from securing network perimeters to securing each individual area within a network.<\/p>\n\n\n\n

The new TIC wants to create a \u201cflexible\u201d framework to accommodate the growing number of mobile devices, remote users, agency branch offices and higher security standards like encryption. TIC 3.0 will divide federal networks in \u201ctrust zones\u201d aimed at \u201cshifting the emphasis from a strictly physical network perimeter to the boundaries of each zone within an agency environment to ensure baseline security protections across dispersed network environments,\u201d like remote offices and branch offices, according to the draft documents.<\/p>\n\n\n\n

\u201cThis shift in approach from securing a single network boundary to a distributed architecture is the most fundamental change from the legacy TIC program,\u201d CISA officials wrote in the draft guidance.<\/p>\n\n\n\t