The principles of good governance apply to your data security policy as well. IT managers should look to incorporate the following principles to craft the perfect balance between self-service and security: Fairness: Shifting from a reactive management environment also means ensuring employees are not overburdened with security measures that they must constantly follow. While a zero trust policy should be enforced, it should also be fair to employees to sustain their productivity. Accountability: Zero trust by design screams accountability. Organizations need to hold everyone in the hierarchy accountable for keeping data secure. Whether it be the CEO, IT manager, or the new intern, the security policy should apply and be enforced upon everyone. Responsibility: For IT managers, ensuring sound security measures is a responsibility that carries a lot of weight. Responsibility also implies ensuring the ability to monitor staff does not cross ethical boundaries with the pretense of keeping everyone safe. Good governance means understanding your responsibilities and the weight they carry as well as creating processes that ensure you live up to them. Transparency: Even within a zero trust security policy environment, ensuring employees know the extent to which they’re monitored is how you develop trust. Being open about security measures that need to be taken actually helps communicate why you need to take these measures. Four principles of good governance