Zero Trust (ZT), according to NIST* is:

“A collection of concepts and ideas designed to minimise uncertainty …. in the face of a network viewed as compromised”.

Many definitions of ZT stress the concept of removing wide-area perimeter defences, while continuing to define themselves in relation to other, often smaller perimeters. This can lead to an over-emphasis on what should be absent when adopting ZT, as opposed to how existing environments may be augmented and evolved with new controls or architectures.

*US National Institute of Standards and Technology

Download our “Towards Zero Trust” whitepaper exploring how some organisations choose to approach and measure ZT adoption.