Zero Trust in plain words
In short: Zero Trust replaces "trust everything inside the network" with "verify every request, every time, and give only the access needed." It is a strategy, not a single product.
The problem with the perimeter model
Traditional networks trusted anything inside the firewall. Once an attacker got in, through a phishing email or a stolen password, they could move freely. Cloud services, remote work and personal devices also mean there's no single "inside" any more.
Three core principles
- Verify explicitly: check identity, device health and context (location, time, risk) for every request.
- Least privilege: give users and systems only the access they need, only for as long as they need it.
- Assume breach: design as if an attacker is already inside. Segment the network, encrypt traffic and monitor everything.
Building blocks
| Area | What it looks like |
|---|---|
| Identity | Single sign-on, multi-factor authentication, conditional access |
| Devices | Only managed, patched, compliant devices get access |
| Network | Segmentation and microsegmentation; firewalls between internal zones, not just at the edge |
| Applications | Access per app, not "the whole network" through a VPN |
| Visibility | Central logging, alerting and regular access reviews |
Practical first steps
- Turn on multi-factor authentication everywhere, starting with admins and email.
- Build an inventory of users, devices and applications. You can't protect what you don't know.
- Segment the network: separate servers, users, guests and IoT/CCTV into zones with rules between them.
- Remove standing admin rights and review who has access to what.
- Centralise logs so you can spot unusual behaviour.
The US standards body NIST describes the architecture in detail in Special Publication 800-207, a good next read.
Key takeaways
- Never trust by location; verify every request.
- Least privilege and assume breach guide every design choice.
- MFA, inventory and segmentation are the first practical steps.
- Zero Trust is a journey, not a product you buy.
Tracks your learning on this device only. See your progress on the learning paths.
Original content written by Mohamed Fayas for FM TecHub. © 2026 FM TecHub. You're welcome to share a link to this page; please don't copy the text elsewhere without permission.