Five-day professional programmes in 14 citiesClassroom, online and in-house info@aractech.com +31 85 7444446

Course IMCS-036

Zero Trust Architecture: Strategy and Implementation

Traditional network security assumed that anything inside the corporate perimeter could be trusted. The outline covers Zero Trust Principles and the Changing Threat Landscape, Identity as the New Control Plane, Devices,...

  • 5 daysClassroom or online
  • 49Upcoming dates
  • 12Cities
  • €1,825Fees from

Choose your format and date

  • 5 days
  • 09:00–14:00
  • Certificate of attendance

Classroom sessions

  1. 7–11 Dec 2026

    Frankfurt

    Next date
    €2,175 + VAT
    Register
  2. 14–18 Dec 2026

    London

    €2,915 + VAT
    Register
  3. 21–25 Dec 2026

    Barcelona

    €2,275 + VAT
    Register
  4. 4–8 Jan 2027

    Frankfurt

    €2,175 + VAT
    Register
  5. 11–15 Jan 2027

    Dubai

    €2,845 + VAT
    Register
  6. 18–22 Jan 2027

    London

    €2,915 + VAT
    Register
  7. 25–29 Jan 2027

    Barcelona

    €2,275 + VAT
    Register
  8. 1–5 Feb 2027

    Barcelona

    €2,275 + VAT
    Register
  9. 8–12 Feb 2027

    Frankfurt

    €2,175 + VAT
    Register
  10. 15–19 Feb 2027

    Geneva

    €3,315 + VAT
    Register
  11. 22–26 Feb 2027

    London

    €2,915 + VAT
    Register
  12. 1–5 Mar 2027

    London

    €2,915 + VAT
    Register
  13. 8–12 Mar 2027

    Barcelona

    €2,275 + VAT
    Register
  14. 15–19 Mar 2027

    Frankfurt

    €2,175 + VAT
    Register
  15. 22–26 Mar 2027

    Istanbul

    €2,825 + VAT
    Register
  16. 5–9 Apr 2027

    Kuala Lumpur

    €2,425 + VAT
    Register
  17. 12–16 Apr 2027

    London

    €2,915 + VAT
    Register
  18. 19–23 Apr 2027

    Barcelona

    €2,275 + VAT
    Register
  19. 26–30 Apr 2027

    Frankfurt

    €2,175 + VAT
    Register
  20. 3–7 May 2027

    Frankfurt

    €2,175 + VAT
    Register
  21. 10–14 May 2027

    Madrid

    €3,400 + VAT
    Register
  22. 17–21 May 2027

    London

    €2,915 + VAT
    Register
  23. 24–28 May 2027

    Barcelona

    €2,275 + VAT
    Register
  24. 7–11 Jun 2027

    Frankfurt

    €2,175 + VAT
    Register
  25. 14–18 Jun 2027

    London

    €2,915 + VAT
    Register
  26. 21–25 Jun 2027

    Barcelona

    €2,275 + VAT
    Register
  27. 5–9 Jul 2027

    London

    €2,915 + VAT
    Register
  28. 12–16 Jul 2027

    Barcelona

    €2,275 + VAT
    Register
  29. 19–23 Jul 2027

    Frankfurt

    €2,175 + VAT
    Register
  30. 26–30 Jul 2027

    Paris

    €2,810 + VAT
    Register
  31. 2–6 Aug 2027

    Rome

    €2,830 + VAT
    Register
  32. 9–13 Aug 2027

    London

    €2,915 + VAT
    Register
  33. 16–20 Aug 2027

    Barcelona

    €2,275 + VAT
    Register
  34. 23–27 Aug 2027

    Frankfurt

    €2,175 + VAT
    Register
  35. 6–10 Sep 2027

    Frankfurt

    €2,175 + VAT
    Register
  36. 13–17 Sep 2027

    London

    €2,915 + VAT
    Register
  37. 20–24 Sep 2027

    Barcelona

    €2,275 + VAT
    Register
  38. 4–8 Oct 2027

    Barcelona

    €2,275 + VAT
    Register
  39. 11–15 Oct 2027

    Frankfurt

    €2,175 + VAT
    Register
  40. 18–22 Oct 2027

    Amsterdam

    €3,215 + VAT
    Register
  41. 25–29 Oct 2027

    London

    €2,915 + VAT
    Register
  42. 1–5 Nov 2027

    London

    €2,915 + VAT
    Register
  43. 8–12 Nov 2027

    Barcelona

    €2,275 + VAT
    Register
  44. 15–19 Nov 2027

    Frankfurt

    €2,175 + VAT
    Register
  45. 22–26 Nov 2027

    Cape Town

    Lowest fee
    €1,825 + VAT
    Register
  46. 6–10 Dec 2027

    Dubai

    €2,845 + VAT
    Register
  47. 13–17 Dec 2027

    London

    €2,915 + VAT
    Register
  48. 20–24 Dec 2027

    Barcelona

    €2,275 + VAT
    Register
  49. 27–31 Dec 2027

    Frankfurt

    €2,175 + VAT
    Register

Online / Live sessions

  1. 7–11 Dec 2026

    Live virtual classroom

    Next date
    €1,625 + VAT
    Register
  2. 14–18 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  3. 21–25 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  4. 4–8 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  5. 11–15 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  6. 18–22 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  7. 25–29 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  8. 1–5 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  9. 8–12 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  10. 15–19 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  11. 22–26 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  12. 1–5 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  13. 8–12 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  14. 15–19 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  15. 22–26 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  16. 5–9 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  17. 12–16 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  18. 19–23 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  19. 26–30 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  20. 3–7 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  21. 10–14 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  22. 17–21 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  23. 24–28 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  24. 7–11 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  25. 14–18 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  26. 21–25 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  27. 5–9 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  28. 12–16 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  29. 19–23 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  30. 26–30 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  31. 2–6 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  32. 9–13 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  33. 16–20 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  34. 23–27 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  35. 6–10 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  36. 13–17 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  37. 20–24 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  38. 4–8 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  39. 11–15 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  40. 18–22 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  41. 25–29 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  42. 1–5 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  43. 8–12 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  44. 15–19 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  45. 22–26 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  46. 6–10 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  47. 13–17 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  48. 20–24 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  49. 27–31 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register

Introduction

Course overview

Traditional network security assumed that anything inside the corporate perimeter could be trusted. Cloud services, remote work, connected suppliers and sophisticated attackers have made that assumption dangerous. Zero Trust replaces it with a simple principle: never grant access by default, verify every request explicitly and limit the damage of any single compromise.

This Zero Trust Architecture training course explains the strategy, design principles and building blocks needed to move an organisation from perimeter-based security to a Zero Trust model. Participants examine identity-centric access control, device health, micro-segmentation, secure access to applications and data, continuous monitoring and policy automation.

Rather than promoting any single product, the course focuses on vendor-neutral reference architectures, maturity models and a realistic migration roadmap. Participants leave able to assess their current environment, prioritise use cases, build a business case and lead a phased Zero Trust programme with measurable outcomes.

View full course outline

What you will achieve

Learning objectives

  • Explain the core principles of Zero Trust and why perimeter-based security is no longer sufficient
  • Describe the main components of a Zero Trust architecture, including identity, devices, networks, applications and data
  • Design identity-centric access policies using strong authentication, least privilege and conditional access
  • Apply micro-segmentation and software-defined access to reduce lateral movement
  • Integrate continuous monitoring, analytics and automation into access decisions
  • Assess organisational maturity and identify priority Zero Trust use cases
  • Build a phased Zero Trust roadmap with governance, metrics and a business case
  • Manage the cultural, operational and supplier changes required for successful adoption

Who should attend

Target audience

  • Information security managers and security architects
  • IT infrastructure, network and cloud managers
  • Chief information security officers and their deputies
  • Identity and access management specialists
  • Enterprise architects and IT strategy professionals
  • Risk, compliance and audit professionals reviewing security programmes
  • Project managers leading security transformation initiatives

Methodology

Learning approach

  • The course combines concise technical briefings with architecture workshops, guided maturity assessments, threat scenario walk-throughs and group design exercises. Participants work on a realistic hybrid enterprise case, progressively designing access policies, segmentation zones and a migration roadmap, and present their recommendations for peer and trainer feedback.

Complete course outline

Five focused days of learning and application

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Day 1

Zero Trust Principles and the Changing Threat Landscape

  1. Why the Perimeter Has Failed: Cloud adoption, remote work, supply chain access and modern attack paths
  2. Core Zero Trust Principles: Verify explicitly, use least privilege access and assume breach
  3. Reference Models: Overview of widely used public Zero Trust frameworks and maturity models
  4. Logical Components: Policy engine, policy administrator and policy enforcement points
  5. Coffee break
  6. Logical Components: Policy engine, policy administrator and policy enforcement points (continued)
  7. Trust Signals: Identity, device posture, location, behaviour and data sensitivity
  8. Common Misconceptions: Why Zero Trust is a strategy and architecture rather than a product
  9. Case Study: Tracing a lateral-movement breach and identifying where Zero Trust controls would have stopped it

Day 2

Identity as the New Control Plane

  1. Identity Foundations: Directories, identity governance and the joiner-mover-leaver lifecycle
  2. Strong Authentication: Phishing-resistant multi-factor authentication and passwordless approaches
  3. Conditional and Risk-Based Access: Building policies that adapt to context and risk signals
  4. Least Privilege in Practice: Role design, just-in-time access and privileged access management
  5. Coffee break
  6. Least Privilege in Practice: Role design, just-in-time access and privileged access management (continued)
  7. Machine and Workload Identities: Service accounts, APIs and secrets management
  8. Identity Threats: Credential theft, token abuse and session hijacking
  9. Workshop: Designing conditional access policies for employees, contractors and administrators

Day 3

Devices, Networks and Micro-Segmentation

  1. Device Trust: Inventory, health attestation, endpoint protection and compliance checks
  2. Unmanaged and Personal Devices: Secure access options for contractors and bring-your-own-device users
  3. Micro-Segmentation Concepts: Reducing blast radius by isolating workloads and data flows
  4. Software-Defined Perimeter and Secure Access Service Edge: Replacing broad VPN access
  5. Coffee break
  6. Securing Operational and Legacy Systems: Practical approaches where agents cannot be installed
  7. Encryption Everywhere: Protecting traffic within the internal network
  8. Practical Exercise: Defining segmentation zones and allowed flows for a hybrid enterprise

Day 4

Applications, Data, Visibility and Automation

  1. Application Access: Per-application access, secure web gateways and API protection
  2. Data-Centric Security: Classification, labelling, rights management and data loss prevention
  3. Continuous Monitoring: Logging, telemetry and behaviour analytics as inputs to access decisions
  4. Coffee break
  5. Security Orchestration and Automation: Automated responses to changing risk signals
  6. Cloud and Multi-Cloud Considerations: Shared responsibility and consistent policy enforcement
  7. Measuring Effectiveness: Metrics and indicators for Zero Trust controls
  8. Workshop: Mapping data flows and designing data protection policies for sensitive information

Day 5

Roadmap, Governance and Adoption

  1. Maturity Assessment: Evaluating current capabilities across identity, devices, networks, applications and data
  2. Prioritising Use Cases: Selecting early wins that reduce risk and build momentum
  3. Building the Business Case: Costs, risk reduction, operational benefits and funding options
  4. Coffee break
  5. Building the Business Case: Costs, risk reduction, operational benefits and funding options (continued)
  6. Phased Migration Planning: Coexistence with legacy architecture and avoiding disruption
  7. Governance and Operating Model: Ownership, policy management, supplier coordination and change control
  8. People and Culture: Communicating change, user experience and stakeholder support
  9. Capstone Exercise: Presenting a three-year Zero Trust roadmap for executive review

Ready to book?

Zero Trust Architecture: Strategy and Implementation

Next session: 7 - 11 December 2026, Frankfurt

Course FAQs

Questions about this course

What participants and training managers usually ask before booking Zero Trust Architecture: Strategy and Implementation. Can't find your answer?

WhatsApp
What does Zero Trust Architecture: Strategy and Implementation (IMCS-036) cover?

This course covers IT Management and Cyber Security through a structured five-day outline focused on practical application, discussion, and implementation planning.

When is the next available session?

The next scheduled session starts on 14 - 18 December 2026. See the course schedules section for the available dates and delivery formats.

Who should attend this course?

Information security managers and security architects, IT infrastructure, network and cloud managers, Chief information security officers and their deputies

Is bilingual course delivery available?

Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.

How can I register for a session?

Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.

Is this course available online as well as classroom-based?

Check the course schedules section for currently published classroom and Online / Live sessions.

Where are classroom sessions delivered?

Current classroom venues include London, Barcelona, Frankfurt, Dubai, Geneva, Istanbul, Kuala lumpur, Madrid, Paris, Rome, Amsterdam, Cape Town.

How long is the training programme?

The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).