# Note #3: Zero Trust principles

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1737672565145/2545e8cb-d4fb-4a93-a5e1-e22a4724159a.jpeg?auto=compress,format&format=webp&q=75 align="left")

**1- Verify Explicitly (Authentication)**: No services should be accessible anonymously. We need to verify every access; everything must have an identity. People, applications, or services—verification is about authentication.

* Strengthen authentication by using MFA or passwordless methods.
    
* Conditional access policy (the new firewall in modern architecture)
    
* User behavior analytics.
    

**2- Least privilege Access(Authorization):**

* Just Enough Access (JEA)
    
* Just In Time (JIT) (access for limited time) with PIM.
    

**3- Assume breach:** This is where you find hackers..

* Network segmentation: e.g. VLanning allows only specific protocols, like SMP, to access servers.
    
* Monitoring
    
* Reviewing