Vendor marketing has long overused the term “zero trust” to imply improved security. Security and risk management leaders must move beyond the hype and implement two key projects
to reduce risk with least privileged access and adaptive security.

Security and risk management leaders should:
• Develop strategies to to address heterogeneous workloads spanning on-premises, hybrid, and virtual environments.
• Identify workloads that require segmentation using means other than agents.