To achieve a zero trust architecture, the following measures will need to be implemented:
Least privilege: The principle of least privilege should be applied to ensure that users and devices only have access to the resources they need to perform their functions. This involves granting the minimum level of access required and then gradually increasing access privileges as needed.
Policy automation: Policies for access control, authentication, and authorization should be automated to reduce the risk of human error and to ensure that policies are consistently applied across the organization.
Continuous validation: Continuous monitoring and validation of user and device behavior is necessary to detect and respond to any anomalies or suspicious activity that may indicate a security breach.