Zero Trust
Problem
Traditionally:
Inside corporate network = trusted.
But an attacker who compromises one internal laptop is now inside.
Network location alone isn't proof of trust.
Solution — Zero Trust
Access decisions continuously consider identity, device, resource, context and policy rather than automatically trusting network location.
Core idea: being inside a network should not automatically grant trust.