SESK: Stuff Everyone Should Know · sesk.info/secplus-zero-trust-principle
What is the core premise of zero trust architecture?
Never trust, always verify: trust is never granted implicitly.
- Everything inside the office network is trusted
- A user is trusted for the day after one login
- Trust is never granted implicitly and is continually evaluated ✔
Why: Zero trust drops the idea of a safe inside network. Every request is checked using identity, device and context, and trust is re-evaluated continuously.
Huh, didn't know that: NIST SP 800-207 says zero trust assumes no implicit trust based only on physical or network location or on who owns the asset.
A zero trust door asks for ID every time you enter. Even the door's mother gets checked.
Like this card?
References
Answer: Trust is never granted implicitly and is continually evaluated. Zero trust drops the idea of a safe inside network. Every request is checked using identity, device and context, and trust is re-evaluated continuously.
- NIST SP 800-207, Zero Trust Architecture nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf
trust is never granted implicitly but must be continually evaluated
Checked 2026-10-10. - NIST SP 800-207, Zero Trust Architecture nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf
Zero trust assumes there is no implicit trust granted to assets or user accounts based solely on their physical or network location
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
Security & PrivacyIn NIST's zero trust model, which component makes the final decision to grant access to a resource?Security & PrivacyIn which cloud service model does the customer control the operating system but not the physical hardware?Security & PrivacyA developer deploys their own app on a provider's platform without managing servers or the operating system. Which model is that?
That's stuff everyone should know.