Zero Trust Architecture

{
  "id": "MLC-T-CYB-004685",
  "term": "Zero Trust Architecture",
  "field": "Cybersecurity",
  "definition": "1. A security model, a set of system design principles, and a coordinated cybersecurity and system management strategy based on an acknowledgement that threats exist both inside and outside traditional network boundaries. The zero trust security model eliminates implicit trust in any one element, component, node, or service and instead requires continuous verification of the operational picture via real-time information from multiple sources to determine access and other system responses.\n\n2. An enterprise’s cybersecurity plan that utilizes zero trust concepts and encompasses component relationships, workflow planning, and access policies. Therefore, a zero trust enterprise is the network infrastructure (physical and virtual) and operational policies that are in place for an enterprise as a product of a zero trust architecture plan.",
  "abbreviation": "ZTA",
  "references": [
    "NIST SP 800-160 Vol. 2 Rev. 1 from E.O. 14028",
    "NIST SP 800-207",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/zero-trust-architecture/"
}