Zero Privilege Architectures

This talk explores Zero Privilege Architectures, contrasting them with traditional Least Privilege and Zero Trust implementations. The presentation outlines a modern IT architecture built on desired state infrastructure, CI/CD, and infrastructure/policy-as-code, emphasizing data services, events, observability, and IAM for secure operation. It details how ING is currently running this architecture and addresses common concerns about cost and feasibility.