Zero Trust Security: An Enterprise Guide

© Jason Garbis and Jerry W. Chapman 2021

J. Garbis, J. W. ChapmanZero Trust Securityhttps://doi.org/10.1007/978-1-4842-6702-8_17

17. A Zero Trust Policy Model

Jason Garbis¹   and Jerry W. Chapman²

(1)

Boston, MA, USA

(2)

Atlanta, GA, USA

 

Policies are at the heart of Zero Trust—after all, its primary architectural components are Policy Decision Points and Policy Enforcement Points. The term policy is heavily overloaded in the English language, of course, with meanings at many different levels. In our Zero Trust world, policies are the structures created by organizations to define which identities are permitted to get access to which resources, under which circumstances. Recall that within a Zero Trust environment, access can only be obtained through ...