The philosophy of Zero Trust networks is that you should trust no one and verify everyone. To put this into practice the following five-part framework is suggested:
Validating the network is no longer enough
Authenticate the user
Authenticate and validate the device
Authenticate the application
Authorize the transaction