• Never trust, always verify – Treat every User/PE/NPE, device,
application/workload, and data flow as untrusted. Dynamically authenticate and explicitly approve all activity, adhering to the principle of Least Privilege.
• Assume breach – Operate and defend resources under the assumption that an adversary already has presence within the environment. Plan for deny-by-default and heavily scrutinize all users, devices, data flows, and requests. Continuously
log, inspect, and monitor all configuration changes, resource accesses, and environment traffic for suspicious activity.
• Verify explicitly – Securely and consistently verify access to all resources, using
multiple attributes (dynamic and static), to derive confidence levels for contextual
access decisions.
https://media.defense.gov/2026/Jan/08/2003852321/-1/-1/0/CTR_ZIG_DISCOVERY_PHASE.PDF
:quality(100))
