What is zero trust?

With the cost of cybercrime now reaching well into the billions of dollars in damages each year, organizations are beginning to realize that existing security measures are insufficient.

The concept of zero trust has emerged as a potential solution. The idea is simple: Trust no one and nothing, even if access is successfully authenticated on the network. Under a zero trust model, all activity on the corporate network is viewed as suspect unless proven otherwise, requiring continuous validation for access to continue. Implemented properly, zero trust will help security professionals prevent breaches and uncover successful attacks earlier—before significant damage has been done.

Practical zero trust frameworks are still emerging, with concepts like NIST 800-207 defining how these architectures should be designed and implemented. But zero trust alone won't solve the security epidemic that enterprises are facing today. It's only one part of a major shift underway that focuses on improving network security through tactics such as microsegmentation, improved authentication systems, and better user training.

To learn more about these best practices and why zero trust is fast becoming the default model for securing networks, check out some of our top stories.

How do we trust the untrustable?

What makes 'critical software' critical?

Constant scrutiny is the key to making zero trust happen

Zero trust: Because no one is safe from attacks

Making better security practical: 5 steps to microsegmentation

Get the security basics right—it could prevent catastrophe

The key to zero trust security? Changing human behavior

How enterprises are securing themselves with zero trust

7 best practices for closing the IT security gap

Zero trust makes business secure by default