The Zero Trust model is based on three basic principles:
All entities are untrusted by default
Least-privilege access is enforced
Constant security monitoring is implemented