Zero Trust Security

Zero trust is a security model based on the principle "never trust, always verify". Instead of assuming that everything inside the company network is safe, as the traditional perimeter or "castle and moat" model does, zero trust checks every user, device and request before granting access, wherever it comes from.

Key ideas include strong identity verification with multi-factor authentication, checking device health, giving each user only the minimum access they need (least privilege), dividing networks into small segments and continuously monitoring activity. It suits modern organisations with remote work and cloud services.