Dictionary · Cybersecurity Fundamentals
Zero Trust
Design · Advanced
A design approach that does not grant trust based only on network location. Every access is checked, continuously where practical, and limited to what that request needs.
Being inside the office network is not proof that a request is safe. Identity, device health, and the specific resource all matter, and a compromise is assumed possible.
Picture it
A request from inside the office is still checked. Identity, device health, and the specific resource decide what that request may do.
Example: An employee on the office LAN still has to authenticate and is allowed to reach only the application their role requires.
Common misconception
- It does not mean there are no firewalls or that nobody is trusted to do their job. It means trust is earned per request.