PodChats for FutureCISO: Zero Trust and Cybersecurity Mesh: A dual shield for cloud security

The ASEAN region’s enterprises are no longer choosing between legacy systems and cloud-native architectures; they are converging them. This is where Zero Trust Network Access (ZTNA) and Cybersecurity Mesh Architecture (CSMA) cease to be competing paradigms and become symbiotic enablers.

For ASEAN CISOs and CIOs, this duality is not theoretical—it’s operational. Regulatory mandates from Singapore’s MAS Technology Risk Management Guidelines, Bank Negara Malaysia’s Cyber Security Framework, Indonesia’s OJK Regulation No. 12/2023, and Thailand’s Personal Data Protection Act (PDPA) demand granular control over data residency and access.

With regulation, pressure to innovate securely, and new technologies like AI making their influence known, what is the path forward for CISOs and CIOs to safeguard resilience without double headcount or budget?

In this PodChats for FutureCISO, Steve Riley, Vice President and Field CTO, Netskope, shares is perspective on How ASEAN CISOs Are Rebuilding Security for a Borderless Cloud Era.

1.       How can CISOs effectively integrate Zero Trust Network Access (ZTNA) principles to secure access in multi-cloud environments without impeding business agility?

2.       In what ways might Cybersecurity Mesh Architecture (CSMA) unify their fragmented security tools across hybrid IT infrastructures?

3.       What role will AI and emerging technologies play in amplifying cloud security risks, and how can CIOs/CISOs mitigate them proactively?

4.       What has worked with regards to how organisations approach use of ZTNA and CSMA?

5.       Any recommendation for quantifying the ROI of shifting from perimeter-based firewalls to a zero-trust + mesh model—not just in cost savings, but in risk reduction?

6.       What long-term metrics should CISOs track to evaluate the success of their cloud security strategy in a rapidly changing Southeast Asian landscape?

7.       Why platforms when it comes to cybersecurity? How does it map to defense-in-depth?

8.       How will we address the increased complexity of managing a distributed security model while adhering to Zero Trust principles?

9.       What would be a realistic roadmap for evolving security posture to embrace both CSMA and Zero Trust?