Zero Trust is a security architecture model that institutes a deny-until-verified approach for access to resources from both inside and outside the network.  It is based on the principle: never trust, always verify. This security approach protects our company and our customers by managing and granting access based on the continual verification of identities, devices and services.   ​

​

​
With Zero Trust, we move away from a trust-by-default perspective to a trust-by-exception one. An integrated capability to automatically manage those exceptions and alerts is important so you can more easily find and detect threats, respond to them, and prevent or block undesired events across your organisation. ​

Microsoft has a host of self-assessments and questionaries for partners an customers to evaluate their Zero-Trust architecture for the existing implementations.