Zero Trust is a concept that requires all internal and external users of the organization’s enterprise network to be securely authenticated and entitled to each resource before being granted access and, here is the important part, is continuously validated at each request to access. Zero Trust assumes your network is compromised and that there is no implicit trust granted based only on physical or logical network location, such as with legacy security models that grant trust based on accessing resources internally versus accessing from external sources.

Next-generation cyber security requires a simpler and more secure architecture without interrupting business and security operations. Zero Trust evolves the enterprise from traditional network-based perimeter security where one login gets you access to everything to a focus on secure access to resources where access is controlled by policies and subject, object, and environmental attributes, on a policy-defined need-to-use basis. Zero Trust assumes there is no implicit trust granted to subjects or devices, no matter their physical or network location, and providing the least privilege per-request access necessary to achieve the job to be done.