Zero Trust
Security
Security model that treats every access request as untrusted; requires continuous verification and least privilege.
Definition
Zero Trust emphasizes strong identity, device posture checks, segmentation, and continuous authorization. It replaces “inside is trusted” assumptions with explicit verification and tight access controls.
Why this matters
Why it matters: Limits lateral movement and unauthorized access, reducing privacy and data exposure when something goes wrong.
Example
Example: Require MFA + device compliance for admin actions, micro-segment internal services, and log/monitor all access decisions.