David Crawford, CGI Federal

David Crawford

Director

A seemingly endless number of moving parts face federal chief information officers and other IT leaders every day, and it can be tempting to approach initiatives as isolated efforts, just for the sake of simplicity. 

However, nothing happens in a vacuum, and taking a holistic view of your IT environment reveals ways in which combined efforts can lead to results that greatly exceed the individual components. 

For example: Integrating portfolio rationalization, IT modernization and zero trust implementation can greatly enhance the efficiency of agency operations. These strategies streamline processes, enhance security and optimize resource utilization to drive operational excellence. 

More than the sum of their parts

An IT modernization initiative often provides an opportunity to implement zero trust principles. Zero trust reinforces some of the goals of modernization, and the necessary business process reengineering and organizational change management that come with modernization can ease the path to enacting the new practices. 

The goals of IT modernization typically include improving efficiency, agility, scalability, reducing costs, enhancing security and enabling digital transformation. Zero trust provides a robust security framework that supports IT modernization efforts.

Identifying and removing duplicative, outdated or unused applications reduces the organization’s potential attack surface while increasing efficiency and reducing software costs. This facilitates modernization and zero trust implementation, providing a simpler, more streamlined array of components that must be accounted for.

After a thorough assessment, the organization can retire, replace or consolidate applications that no longer serve a useful purpose. The remaining high-value applications and systems provide the best value for the cost, rather than supporting redundant and disused elements. Moreover, you will find your IT environment has become less complex and easier to manage. 

Combined impact on business and mission operations

An integrated strategy combining portfolio rationalization, IT modernization and zero trust implementations creates a holistic approach to improving business operations. Aligning these strategies with business and mission objectives facilitates optimized processes, streamlined IT environments and enhanced workflows. 

Modern IT infrastructures and security frameworks enable rapid development and deployment of new products and services. As executive orders shape federal IT strategies, the ability to deploy applications and functionality more rapidly contributes to enhanced efficiency, security and agility.

Modernization yields more efficient operations, enabling agencies to cut costs while achieving mission outcomes. Moreover, improving efficiency and the deployment of modern applications often improves stakeholder engagement. Efficient and secure IT operations  build trust and confidence among customers and stakeholders, fostering a positive reputation and building productive long-term relationships.

Appreciating the big picture

Understand there is no defined end state for zero trust—you never actually get there. It is an information security model that organizations continuously refine and integrate new technologies into.

Application rationalization, as a subset of the larger zero trust paradigm, is also an ongoing effort. With every new application that comes online, there are other applications already in use that might become outmoded or redundant. Harnessing application proliferation is a project in itself, but it is essential to ensure your zero trust framework is as effective as it can be. 

Zero trust is a critical component of IT modernization efforts, and its creator, John Kindervag, emphasizes that it is intended to be simple. However, as straightforward as it can be, it does demand care and attention to detail. 

Careful attention to all the pillars will lead to a more successful effort, enabling you to more easily expand and revise to keep up with changes. 

For more insight into zero trust visit www.cgi.com/zero-trust.

About this author

David Crawford, CGI Federal

David Crawford

Director

David Crawford is a lead cyber architect in the National Security and Justice business unit at CGI Federal.