>>> Backups are also very expensive, whereas zero trust is cheap.
In reality the inverse is almost always true unless you are setting up a company from the start to be Zero Trust
Implantation of Zero Trust on an existing network and existing company with establish business processes that depend on a non-zero trust network well that can be very expensive to implement.
Also as we move forward in time with better and better immutable backup technologies the cost of the doing proper backups comes done.
Finally with modern Ransomware it is not just about the encrypted data, it is about data exfiltration as well. This is where the Zero Trust model come in, to prevent exfiltration.
At the end of the day Zero Trust and Backup are 2 different things, used for different purposes, Having Zero Trust does not mean you can forego backup. Having proper backups immutable does not mean can forego Zero Trust.
True, I'm making an assumption that a company is young. For older companies it'll be years to move to zero trust - although, once you do, it's "free". Backups are pretty costly and that cost never goes away.
I didn't say it was one or the other, I recommended both.
In reality the inverse is almost always true unless you are setting up a company from the start to be Zero Trust
Implantation of Zero Trust on an existing network and existing company with establish business processes that depend on a non-zero trust network well that can be very expensive to implement.
Also as we move forward in time with better and better immutable backup technologies the cost of the doing proper backups comes done.
Finally with modern Ransomware it is not just about the encrypted data, it is about data exfiltration as well. This is where the Zero Trust model come in, to prevent exfiltration.
At the end of the day Zero Trust and Backup are 2 different things, used for different purposes, Having Zero Trust does not mean you can forego backup. Having proper backups immutable does not mean can forego Zero Trust.