Zero Trust

CORE DEFINITION

The Zero Trust security model, also known as Zero Trust Architecture, Zero Trust Network Architecture, ZTA, ZTNA, and sometimes perimeterless security, describes a method for the design and implementation of IT systems. The main concept of the Zero Trust security model is "never trust, always verify," meaning that devices should not be trusted by default, even if they are connected to a permitted network (such as a corporate LAN) and have been previously verified. Most modern enterprise networks are complex, consisting of numerous interconnected zones, cloud services, and infrastructure, as well as connections to remote and mobile environments, and non-traditional IT connections (e.g., IoT devices). Zero Trust principles arise because traditional approaches, such as trusting devices within a nominal "enterprise perimeter" or connecting via VPN, are impractical given the complexity of enterprise network environments. Zero Trust advocates mutual authentication, including checking device identity and integrity regardless of location, and combining user authentication with confidence based on device identity and condition to grant access to applications and services.