Security model that requires verification of every user and device, regardless of location, before granting access.
Zero Trust is a security architecture based on the principle 'never trust, always verify'. Unlike traditional perimeter security that trusts users inside the network, Zero Trust treats every access request as potentially hostile. It requires strong identity verification, validates device health, grants least-privilege access, and continuously monitors for threats. Zero Trust assumes breach—that attackers may already be inside—and limits their ability to move laterally. Implementation involves identity management (like Entra ID), device compliance (Intune), network segmentation, and continuous monitoring. Microsoft's Zero Trust model is a common implementation framework.
Why It Matters
The DSC Perspective:
Perimeter security fails when users work from anywhere and data lives in multiple clouds. Zero Trust protects your resources regardless of where access comes from. It's becoming the expected security architecture for modern organisations.