Glossary
Zero Trust
A security model that verifies every access request explicitly, applies least privilege, and assumes breach.
Zero Trust is the security model where every access request is verified explicitly based on user, device, location, and risk signals — with no implicit trust granted by being on the corporate network. Microsoft frames it around three principles: verify explicitly (use all available signals), use least privilege (just-in-time, just-enough access), and assume breach (minimise blast radius, segment, encrypt, monitor). In Microsoft 365, zero trust is implemented through Conditional Access (the policy decision point), Intune compliance (device posture), PIM (privileged access), sensitivity labels and DLP (data protection), and Defender XDR (continuous monitoring). Not a product — an architecture realised through these tools.