Glossary · Z

Zero Trust

Security based on explicit verification and limited access

What it means

Zero Trust is a security approach that does not grant access solely because a user or device is inside a trusted network. Access decisions use identity, permissions and relevant context, with least privilege and ongoing assessment. It is an approach to security, not a particular integration layer or product.

What it means for a business

A business can restrict access to an application or API according to user and device identity, grant only the permissions needed and record access decisions. Adding a new interface to an existing system does not by itself establish Zero Trust or eliminate security and regression risks.

In practice

Read the full article

Keep reading

Articles that refer to this term.

Finance and decisions
Dig.IT and Digital Investment: Build the Business Case First
Assess a digital investment before relying on a grant. Check Dig.IT call rules, cash flow, eligible costs and a clearly illustrative NPV model without assuming funding or savings.
4 min read
Law and responsibility
NIS2, the AI Act and GDPR: Shared Evidence, Distinct Assessments
Organise common evidence for cybersecurity, AI risk and data protection while preserving each framework’s scope, accountable roles, assessment criteria and reporting duties.
4 min read
Technology and data
NIS2 Incident Reporting: The 24-Hour, 72-Hour and Final-Report Sequence
Understand Article 23’s significant-incident reporting sequence, awareness trigger and operational records. Confirm national and sector-specific requirements before applying it.
4 min read

All glossary terms

What it means

What it means for a business

Related terms

Keep reading

Dig.IT and Digital Investment: Build the Business Case First

NIS2, the AI Act and GDPR: Shared Evidence, Distinct Assessments

NIS2 Incident Reporting: The 24-Hour, 72-Hour and Final-Report Sequence