Authors: Madhulika Gajjala, Satya Prakash Prakki, Venkatarami Reddy
Abstract: The fast adoption of cloud-based enterprise apps has greatly improved organisational efficiency, but has also increased cybersecurity risks related to identity theft, insider assaults, unauthorised access and advanced cyber dangers. Workday, being one of the top Cloud-based company Resource Planning (ERP) applications for Human Capital Management (HCM), Financial Management, Payroll and Analytics, requires a strong security architecture to secure sensitive company data in distributed environments. Traditional perimeter-based security solutions are not adequate to secure modern cloud ecosystems as they operate under the implicit trust after authentication. The ZTSA-WEE framework is put forward in this paper where users, devices, and applications are authenticated and authorised with the help of risk assessment, dynamic trust evaluation, micro-segmentation, and intelligent anomaly detection in the context. The mentioned framework is associated with identity verification, policy-based access control, adaptive risk analysis, continuous monitoring, and intelligent threat detection, which minimises unauthorised access and reduces the attack surface area. The experimental analysis of the performance of the framework is carried out by the simulated enterprise security scenarios and indicates that the proposed framework outperforms the current Zero Trust frameworks in the aspects of high authentication accuracy, high threat detection rate, high policy compliance, low false positive rate, and fast response time.
