Starting in 2024, the project entered its second phase with a stronger focus on cybersecurity. The goal was to protect corporate data and regulate access to company resources for more than 300 users, including employees and external partners.
To address these cybersecurity challenges, Fidigit adopted a Zero Trust security model based on the principle of “never trust, always verify.” In this approach, no user or device is trusted by default—regardless of their role, location, or endpoint.
The Zero Trust framework has proven highly effective in protecting against advanced threats such as phishing, ransomware, and data breaches. It is also particularly well-suited for today’s work environments, where users access systems from various devices and locations.
The model is built on three core principles:
- All entities are untrusted by default
- Access is granted based on the principle of least privilege
- Monitoring must be continuous, comprehensive, and immediate
Fidigit’s security infrastructure was redesigned to reflect these principles and to ensure secure, seamless access to corporate data and applications.
If a device fails to meet security policies—such as having outdated antivirus software, known vulnerabilities, or unusual login behavior—access to sensitive data is denied or restricted, minimizing risk exposure.
Following the Zero Trust approach, user behavior is monitored in real time. Risky actions are proactively blocked, such as downloading suspicious files, visiting malicious websites, using unverified devices, or sharing sensitive information.
Security controls are enforced at all levels to protect data across files, applications, and instant messaging platforms.