Zero trust

A security model that grants no implicit trust just because a connection comes from inside the corporate network or over VPN; every access request is decided on identity, device state and least privilege. It does not require a big-bang rebuild: start with the most attacked entry points, such as putting admin interfaces and internal apps behind an identity-aware access gateway.

Further reading: csrc.nist.gov

All terms