The Open Group's Zero Trust Archtecture/Supply Chain Security

Zero Trust and Zero Trust Architecture (ZTA) represent a fundamental shift in security from implicit permissions to explicit permissions. This means organizations, whether public or private, are changing from allowing those inside a “secure” network to have access to assets whenever (implicit trust) to instead verifying the identity of those seeking access (explicit trust), allowing access only as needed by those who need it when they need it. This is a shift from a perimeter-centric approach to an asset-centric approach. Zero Trust brings security to the users, data & information, applications, APIs, devices, networks, cloud, etc. wherever they are – instead of forcing them onto a “secure” network.