Zero trust does not grant trust from network location alone

NIST’s Zero Trust Architecture, published 11 August 2020, says zero trust does not grant implicit trust to an asset or account solely because of network location or ownership. The model focuses security decisions on users, assets and resources, with authentication and authorization taking place before access to an enterprise resource is established. [Source: NIST, 11 August 2020.]

That is an architectural principle, not evidence that any particular product or customer environment is “zero trust.”

Use zero trust to sharpen discovery rather than decorate the pitch. Ask which resource is being protected, which identity is requesting access, what policy determines the decision and which parts remain customer-controlled. If your product supports one enforcement or identity function, describe that function precisely instead of claiming that the entire customer architecture has become zero trust.

Relevant programme: Build architecture and evidence judgment with the ASTRA Cybersecurity Sales Specialist programme: https://www.astraready.com/programmes/