Zero Trust
A security architecture that rejects implicit trust based on network location and continuously evaluates access using identity, device, resource, and policy context.
Boundaries
Zero Trust does not mean blocking every interaction or distrusting users arbitrarily; it means removing implicit trust and making access decisions explicit and continuously evaluated.
Related Concepts
- Least Privilege
- Identity
- Policy Enforcement
- mTLS
Source
- https://csrc.nist.gov/publications/detail/sp/800-207/final