Zero Entropy Networks Zero-trust networks, engineered for resilience

Zero Entropy Networks

Zero-trust networks, engineered for resilience

Latest Articles

Audit & Assurance

The Parallel Estate: Auditing the Management Plane You Did Not Put on the Diagram

Zero-trust programmes tend to map users, workloads and data flows, then stop at the server's front door. The management plane — BMCs, console servers, KVM switches and serial concentrators — is often a parallel estate with broad authority and weak oversight. This article offers a UK audit and design pattern for bringing it inside the trust boundary without removing the emergency path engineers depend on.
The Error Bar Is the Evidence: Reading Zero-Trust Dashboards Without False Precision
Audit & Assurance

The Error Bar Is the Evidence: Reading Zero-Trust Dashboards Without False Precision

Composite trust scores often look more precise than the evidence beneath them. This article sets out how UK boards and assurance teams can read zero-trust dashboards with confidence bands, provenance and known gaps intact — and why an honest range is a stronger control than a single green number.
The Order of Return: Rebuilding Trust After a Site-Wide Power Failure
Zero-Trust Strategy

The Order of Return: Rebuilding Trust After a Site-Wide Power Failure

Power restoration is not trust restoration. When a UK site loses supply, zero-trust services can return in an order that quietly defeats their own assumptions. This article sets out a practical cold-start rehearsal for resilience teams, with evidence that boards can actually use.
Walls, Cameras and Chillers: Putting the Estate Edge Inside the Trust Boundary
Zero-Trust Strategy

Walls, Cameras and Chillers: Putting the Estate Edge Inside the Trust Boundary

UK zero-trust programmes often stop at user endpoints and cloud workloads, leaving building management systems, CCTV and access control on flat, contractor-friendly networks. This article sets out a practical route to identity-aware segmentation, supervised vendor access and safe resilience testing at the estate edge.
The Quiet Fortnight: Why a December Change Freeze Conceals More Trust Risk Than It Removes
Zero-Trust Strategy

The Quiet Fortnight: Why a December Change Freeze Conceals More Trust Risk Than It Removes

A holiday change freeze is often presented as evidence of control. In practice, it can freeze the change while leaving the drift untouched. As UK organisations approach the 2026 December peak, the more useful question is not whether change is paused, but whether trust decisions remain auditable when the usual approvers are on leave.
Provenance Before Packets: A UK Procurement Test for Firmware Trust
Audit & Assurance

Provenance Before Packets: A UK Procurement Test for Firmware Trust

Zero trust loses its meaning if a switch, router or appliance can arrive with unverifiable firmware and still be admitted to the network. This article sets out a UK procurement and acceptance routine for firmware provenance, secure boot and lifecycle attestation, written for technology leaders who need evidence rather than assurances.
Before the Token Expires: Why Trustworthy Time Deserves a Place in UK Zero-Trust Assurance
Audit & Assurance

Before the Token Expires: Why Trustworthy Time Deserves a Place in UK Zero-Trust Assurance

Zero-trust decisions look like identity and policy problems until a certificate is judged valid at the wrong moment or an audit trail is challenged because the clock cannot be trusted. This article sets out why time synchronisation belongs inside the UK zero-trust perimeter, and how to assure it without turning every team into a timing specialist.
Inherited Trust Is Not a Legacy Asset: Sequencing Zero Trust Through a UK M&A Integration
Zero-Trust Strategy

Inherited Trust Is Not a Legacy Asset: Sequencing Zero Trust Through a UK M&A Integration

A deal completes on a Friday and by Monday two identity estates are expected to behave as one. Most UK integrations flatten the network and hope for the best. This playbook sets out a different order of work: discovery that produces evidence, identity federation before plumbing, harmonised policy written as testable assertions, and a decommissioning register that closes the books properly.
The Binding Constraint Is Watts: Choosing Where Workloads Live When Connection Dates Slip
Resilience Case Studies

The Binding Constraint Is Watts: Choosing Where Workloads Live When Connection Dates Slip

For twenty years latency decided where a workload ran. In 2026 the honest answer is often a grid connection date. Three composite UK cases show how identity-aware routing, segment-sized moves and degraded-mode design let placement decisions survive a power-constrained decade.
When the Pager Goes Off: Engineering Emergency Access That Zero Trust Can Still Vouch For
Zero-Trust Strategy

When the Pager Goes Off: Engineering Emergency Access That Zero Trust Can Still Vouch For

Emergency access is where zero-trust estates most often go to die: a standing administrator account, a shared password in a safe and a promise to review it later. A blueprint for UK teams that need minutes, not hours, while keeping approval, expiry and forensic evidence intact.
Ghost Credentials, Real Risk: Making Access Decommissioning an Auditable Routine
Audit & Assurance

Ghost Credentials, Real Risk: Making Access Decommissioning an Auditable Routine

Most UK zero-trust estates carry more access than anyone can account for: dormant VPN profiles, orphaned service accounts and firewall rules that were meant to last a fortnight. This is a working model for retiring them on a schedule, with the stakeholder conversations and evidence artefacts that keep assurance teams satisfied.
Stop Writing Policy, Start Manufacturing Evidence: A 90-Day Room for UK Zero-Trust Assurance
Audit & Assurance

Stop Writing Policy, Start Manufacturing Evidence: A 90-Day Room for UK Zero-Trust Assurance

Regulators, insurers and enterprise customers increasingly want proof rather than assurance by assertion. The answer is not another framework document — it is a small, well-governed evidence room built in 90 days, with named owners, minimum artefacts and a review cadence that survives scrutiny.
The Long Inventory: Sequencing Post-Quantum Readiness Into Zero-Trust Delivery, 2026–2030
Zero-Trust Strategy

The Long Inventory: Sequencing Post-Quantum Readiness Into Zero-Trust Delivery, 2026–2030

Most UK zero-trust programmes still file post-quantum cryptography under 'future encryption upgrade'. That framing is the problem. This is a sequencing argument: discovery, certificate and identity inventory, prioritised segmentation and supplier evidence, ordered so that resilience improves each quarter rather than arriving in one fraught migration.
The Residency Illusion: Why One UK Region Is Not a Resilience Strategy
Resilience Case Studies

The Residency Illusion: Why One UK Region Is Not a Resilience Strategy

A data-residency clause can satisfy a procurement tick-box while hiding a single-region dependency that will surface during the next disruption. UK leaders should separate sovereignty from resilience and test the operational gaps their cloud contracts do not close.
Who Signs the Agent's Passport? Governing Non-Human Identities Before They Touch Production
Zero-Trust Strategy

Who Signs the Agent's Passport? Governing Non-Human Identities Before They Touch Production

AI agents are becoming operational colleagues, but many UK enterprises still govern them like shared service accounts. A zero-trust model for non-human identities requires scoped permissions, short-lived credentials, explicit delegation and human approval gates that stand up to audit.
When the Last Mile Fails: Designing a Zero-Trust WAN That Bends Without Breaking
Resilience Case Studies

When the Last Mile Fails: Designing a Zero-Trust WAN That Bends Without Breaking

A zero-trust architecture is only as resilient as the paths beneath it. This UK playbook examines how to combine independent carriers, identity-aware failover, 5G backup and tabletop testing so that an Openreach outage does not become an identity crisis.
Third Parties, First Principles: Auditing Supplier Trust Without Stalling the Deal
Zero-Trust Strategy

Third Parties, First Principles: Auditing Supplier Trust Without Stalling the Deal

Outsourcing network operations does not outsource accountability. This buyer's checklist sets out how UK technology leaders can audit MSP and SaaS access, demand continuous assurance, and draft breach-ready contracts without turning procurement into a six-month blockade.
The Disorder Ledger: Why Network Entropy Belongs on the Board Agenda Before Zero-Trust Spend
Zero-Trust Strategy

The Disorder Ledger: Why Network Entropy Belongs on the Board Agenda Before Zero-Trust Spend

Zero-trust platforms are often bought before the organisation can see what it is protecting. This article sets out a practical network entropy score that UK technology leaders can use as a resilience baseline, and maps it directly to NCSC Cyber Assessment Framework outcomes.
What Held When the Ransomware Hit: Three UK Zero-Trust Drills, Three Hard Lessons
Resilience Case Studies

What Held When the Ransomware Hit: Three UK Zero-Trust Drills, Three Hard Lessons

In 2026, three UK organisations moved from tabletop exercises to live-fire ransomware simulations against their zero-trust estates. A council, a logistics operator and an NHS trust reveal what broke, what held and what other IT leaders should copy.