Zero trust is a security model that assumes that no one, inside or outside an organization’s network, is inherently trustworthy. This approach contrasts with the traditional castle-and-moat approach to security, which assumes that everything inside the network is trustworthy and only threats from the outside need to be addressed.
In a zero-trust environment, every user, device, and application is continuously authenticated and authorized, and access to resources is granted on a least-privilege basis. This means that even if an attacker is able to gain access to the network, they will not be able to move laterally and access sensitive data or systems.