EMZETT.Zero trust
In short: Zero trust is a security principle: no device, user or network is automatically trusted; every request is checked.
In more detail: In the past the internal company network was considered safe (“castle with a moat”). Whoever was inside could do a lot. With zero trust every request is authenticated, authorised and encrypted regardless of its origin, with as few rights as possible.
In Depth
- Principles: never trust, always verify. Least privilege. Assume a breach.
- Building blocks: strong sign-in (2FA), check device state, microsegmentation, encryption everywhere, constant logging.
- Remote work: Instead of a VPN for everything there is access per application.
- At home: Separate different networks (guests, smart home).