Zero Trust
A model in which no user, device, or network is trusted by default — verify everything, always.
Zero Trust discards the old “trusted internal network” perimeter and verifies every request as though it originates from an open network — authenticate, authorize, and continuously validate based on identity, device posture, and context. NIST SP 800-207 defines the architecture; in practice it relies on micro-segmentation, least-privilege access, and the operating assumption that a breach has already occurred.