Abstract
This research investigates the challenges faced by Hong Kong public sector organisations in implementing Zero Trust Architecture (ZTA). Through surveys of 40 IT security professionals and case studies of three departments, we identify key barriers and success factors.
1. Introduction
Zero Trust Architecture represents a fundamental shift from perimeter-based security to a model where every access request is verified regardless of origin. Hong Kong’s government has mandated ZTA adoption across all departments by 2028.
2. Key Challenges Identified
- Legacy System Integration: 78% of respondents cited difficulties integrating ZTA with existing legacy systems
- Skills Gap: 65% reported insufficient in-house expertise for ZTA implementation
- Budget Constraints: 52% indicated that funding limitations delay implementation timelines
- Cultural Resistance: 41% noted organisational resistance to changing established security workflows
3. Success Factors
Organisations that adopted a phased approach, invested in staff training, and secured executive sponsorship demonstrated significantly higher success rates in ZTA implementation.