Zero trust: Never trust, always verify.
Principles
- Verify explicitly
- Use least privilege access
- Assume breach
- Micro-segmentationImplementation
- Multi-factor authentication
- Device verification
- Network segmentation
- Continuous monitoring