What is zero trust security model?

Question

Accepted Answer

**Zero Trust** — never trust, always verify. Security model for modern networks.

**Principles:**
- Never trust, always verify.
- Least privilege access.
- Micro-segmentation.
- Assume breach.

```
Zero Trust:
No implicit trust for any user/device
Verify every request
Access only what's needed
Assume network is compromised
```

**Components:**
- Identity verification.
- Device health checks.
- Network segmentation.
- Continuous monitoring.

```
Zero Trust Architecture:
User → Identity Provider → Policy Engine → Resource
  (Verify identity, device, context)
  (Grant least privilege)
```

**vs Traditional:**
- Traditional: trust internal network.
- Zero Trust: trust nothing.

**Benefits:** Better security, reduced attack surface.

Systems Analyst: What is zero trust security model?