Glossary

Zero Trust is a cybersecurity framework that assumes the company is always at risk from internal and external threats. All users, applications, and activities are considered potential threats rather than implicitly trusted. A Zero Trust model requires continuous authentication and validation at every stage of a transaction and operates on the principle of least privilege. This is in contrast to previous security models, which would assume that a user or entity is trustworthy once their identity is validated through their credentials. In these models, a threat actor could have unilateral access to all sensitive areas of a company’s network, especially if it hasn’t implemented access control, network segmentation, and other measures to restrict access to sensitive data.