The Open Group, Zero Trust Architecture

Zero Trust and Zero Trust Architecture (ZTA) represent a fundamental shift in security from implicit permissions to explicit permissions. This means organizations, whether public or private, are no longer allowing those inside a “secure” network to have access to assets whenever(implicit trust) to verifying always the identity of those seeking access (explicit trust), allowing access only as needed by those who need it when they need it. This is a shift from a perimeter-centric approach to an asset-centric approach. Zero Trust brings security to the users, data & information, applications, APIs, devices, networks, cloud, etc. wherever they are – instead of forcing them onto a “secure” network.