Zero-Trust Basics for Startups

1. What the Term Actually Means

Zero trust is sold as a product category and is a design principle. The principle is narrow and worth stating precisely, because the vendor version is much larger than the idea.

The standards definition is that no implicit trust is granted to an asset or an account based solely on its physical or network location, and that authentication and authorization are performed before a session to a resource is established. The focus moves from protecting network segments to protecting resources.

Stated as a change in assumption, it is one sentence.

Being on