According to NIST's Special Publication 800-207 , a Zero Trust Architecture (ZTA) is an "end-to-end approach to enterprise resource and data security that encompasses identity (person and non-person entities), credentials, access management, operations, ...