Zero Trust: verify explicitly, use least privilege, assume breach

Recap + common pitfalls

Perimeter tools can exist, but trust decisions come from signals and principles. VPN (Virtual Private Network) is not automatic trust. Zero Trust is a model, not a single product. Don't apply it only to 'external' users. Don't ignore assume breach (contain plus detect).