Zero trust
A security model that verifies every request on its merits instead of trusting anything because of where it came from.
The old model trusted the internal network: inside the firewall was safe, outside was not. Cloud services and remote work dissolved that boundary, and attackers who phish a credential arrive as trusted insiders anyway.
In practice it means verifying identity and device health on every access request, granting the minimum needed, and assuming a breach has already happened when designing controls. It is an architectural direction rather than a product you can buy.
Where this comes up
Zero trust sits inside our cybersecurity and threats work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.