Zero Trust

Zero Trust is sometimes presented as a product category. It is better understood as a design principle.

Verify explicitly. Limit unnecessary access. Assume conditions will change. Monitor what matters.

The goal is not to make work difficult. It is to reduce the number of situations where one compromised account, device, or application can become a company wide problem.