Glossary: Security Controls and Change Management
Zero Trust
Also written: never trust, always verify
An approach that gives no trust based on network location and verifies every request. It grants the least access for the shortest time and acts as if an attacker may already be inside, so Jo's office laptop is checked like any other.
Where the book teaches it
Related terms
Least privilegeImplicit trust zonePolicy decision pointMicrosegmentationAssume breachNIST SP 800-207