Definition
A security framework that mandates that no user, device, or system should be implicitly trusted, requiring strict verification and authorization for all access attempts.
In short: A security framework that mandates that no user, device, or system should be implicitly trusted, requiring strict verification and authorization for all access attempts.