CORE

Zero trust

A security model that never assumes a user or device is safe just because it's inside the network — every request is verified on its own merits, every time.

For small firms

In practice for a small firm this mostly means: MFA everywhere, and access decisions based on identity and device health, not just "are they on our Wi-Fi."

Related terms

IAM Conditional access Access rules that adapt to context — location, device health, risk. NET Zero trust network access Remote access that grants one verified app connection instead of the whole network. IAM Multi-factor authentication Requiring two or more proofs of identity to log in, not just a password.
← Back to Security fundamentals