About zero trust
Zero trust is a security architecture centered on the concept that organisations should not automatically trust anything inside or outside its perimeters and instead must verify anything and everything trying to connect to its systems before granting access.
- Zero trust assumes that individuals, devices and networks are not trusted. Trust is continuously earned through verifying factors, such as identity, context and activity
- Zero trust draws on technologies such as multifactor authentication (MFA), Identity and Access management (IAM), orchestration, analytics, encryption, scoring and file system permissions
- Zero trust also calls for governance policies such as giving users the least amount of access they need to accomplish a specific task
- the Zero trust system adapts in real time, continually verifying whether to grant or restrict access