# Zero Trust
**Entity class:** Cybersecurity architecture
## Definition
**Zero Trust** is a cybersecurity architecture that removes implicit trust based solely on network location and continuously evaluates identity, device, application, data, and policy context before granting access. It is an architecture and operating model, not one product.
## Relationships
- **DoD infrastructure:** [[wiki/Department of Defense Information Network|DoDIN]] and [[wiki/Joint Warfighting Cloud Capability|JWCC]].
- **supports:** [[wiki/CJADC2|CJADC2]] by protecting distributed access and data movement.
- **related controls:** [[wiki/Role-Based Access Control|RBAC]], identity, segmentation, telemetry, and continuous authorization.
## Sources / Provenance
- [DoD CIO — Zero Trust Strategy](https://dodcio.defense.gov/Portals/0/Documents/Library/DoD-ZTStrategy.pdf)