Skip to content

Glossary: Security Controls and Change Management

Zero Trust

Also written: never trust, always verify

An approach that gives no trust based on network location and verifies every request. It grants the least access for the shortest time and acts as if an attacker may already be inside, so Jo's office laptop is checked like any other.

Where the book teaches it

Related terms

Least privilegeImplicit trust zonePolicy decision pointMicrosegmentationAssume breachNIST SP 800-207