nucleation

LIT-1226: Zero Trust Architecture

1 min read

Properties4
StatusActive — read 2026-10-29 (NOTE-1371) in full, from NIST's own PDF; worth reading as the reference definition of zero trust: no implicit trust from network location or ownership, every session to a resource authorized by a policy engine and administrator and enforced at a policy enforcement point, on dynamic policy over identity, asset state and behaviour. Read it knowing that it is a guideline that measures nothing, that it moves absolute trust onto the policy engine and administrator and answers their subversion only with configuration, monitoring and audit, and that it leaves an insider acting within an account's granted access largely outside its reach.
Version2
Tagssociety-and-governance
Cited as “paper” byNOTE-1371 — Rose et al. — Zero trust architecture (NIST SP 800-207)

Graph View

Rose, S., Borchert, O., Mitchell, S. & Connelly, S. (2020). Zero Trust Architecture. NIST Special Publication 800-207. Gaithersburg, MD: National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-207.

Read in full on 2026-10-29 (NOTE-1371).

Why this is here

A41 of the exchange cited NIST’s “zero-trust architecture” alongside its control catalogue, as governance that does not assume any constituent is sound. Bears on CLAIM-359 and CASE-108.

Backlinks