Misconception M3 / F5

Zero trust is not a product or a VLAN

Zero trust is a product we bought, or the contractor VLAN.

Wrong claim

Why it feels true

A vendor slide and a new VLAN both get the label because the network diagram changed.

Precise correction

NIST SP 800-207 (final 11 August 2020) describes zero trust as principles for protecting resources, including a refusal to treat network location as enough trust.

A product, a ZTNA appliance, or a contractor VLAN can be one control in that design.

None of them is the architecture, and none of them replaces an application decision about what Jordan may do in YardOS.

NIST SP 800-207 Zero Trust Architecture, final 2020-08-11 ↗

MINI-CHECK

Devon puts the scanner vendor on the warehouse VLAN and says the zero-trust product is done. What is still missing?

Go deeper

Find your next idea.

Tip: press / to open search. Escape closes this window.