Zero Trust
A security architecture that rejects implicit trust based on network location and continuously evaluates access using identity, device, resource, and policy context.
Threat-Model Boundary
Zero Trust does not mean blocking every interaction or distrusting users arbitrarily; it means removing implicit trust and making access decisions explicit and continuously evaluated.
Related Security Concepts
- Least Privilege
- Identity
- Policy Enforcement
- mTLS
Source
- https://csrc.nist.gov/publications/detail/sp/800-207/final