# Zero Trust

Zero Trust is a security model that assumes no user or device is trustworthy by default — every access request is verified based on identity, device health, location, and least privilege, regardless of whether the user is "inside" the office network.

It replaces the old perimeter-only mindset (castle-and-moat VPN) with continuous validation. Microsoft’s implementation combines Entra ID conditional access, Intune compliance, segmented networks, and logging to SIEM.

Adopting Zero Trust is a journey: start with MFA everywhere, retire legacy VPN-only access to SaaS, micro-segment critical servers, and monitor sign-ins for anomalies.

## Related services
- [cybersecurity](https://amensecurity.ca/en/services/cybersecurity.md)
- [network](https://amensecurity.ca/en/services/network.md)
- [cloud](https://amensecurity.ca/en/services/cloud.md)

---
Source page: https://amensecurity.ca/en/glossary/zero-trust
Markdown version for AI agents · Amen Security
Email: info@amensecurity.ca
Phone: +1 (204) 514-3536