Co esponding au ho : RAJESH RAJAMOHANAN NAIR
Copy igh © 2025 Au ho (s) e ain he copy igh o his a icle. This a icle is published unde he e ms o he C ea i e Commons A ibu ion License 4.0.
Ze o- us a chi ec u e: Rede ining en e p ise secu i y pa adigms
RAJESH RAJAMOHANAN NAIR *
Doc o al S uden , Colo ado Technical Uni e si y, USA.
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
Publica ion his o y: Recei ed on 28 Ma ch 2025; e ised on 05 May 2025; accep ed on 08 May 2025
A icle DOI: h ps://doi.o g/10.30574/wja .2025.26.2.1684
Abs ac
This a icle examines he pa adigm shi om adi ional pe ime e -based secu i y o Ze o-T us A chi ec u e (ZTA) in
en e p ise en i onmen s. As cybe h ea s con inue o e ol e in sophis ica ion, con en ional "cas le-and-moa " secu i y
models ha e p o en inc easingly inadequa e, pa icula ly in hei inabili y o p e en la e al mo emen once pe ime e s
a e b eached. Ze o-T us A chi ec u e, ounded on he p inciple o "ne e us , always e i y," o e s a compelling
al e na i e by equi ing con inuous au hen ica ion and au ho iza ion o all ne wo k a ic ega dless o i s o igin. The
a icle de ails implemen a ion challenges such as high ini ial in es men cos s, legacy sys em in eg a ion complexi ies,
p oduc i i y impac s du ing ansi ions, o ganiza ional esis ance, and echnical skill gaps. I hen p esen s e idence-
based bes p ac ices o success ul ZTA deploymen , including s a ing wi h iden i y and access managemen ,
implemen ing mul i- ac o au hen ica ion, de eloping comp ehensi e asse in en o ies, designing ne wo k mic o-
segmen a ion, es ablishing con inuous moni o ing capabili ies, c ea ing g anula secu i y policies, and conduc ing
egula secu i y awa eness aining. I concludes by examining eme ging ends in Ze o-T us e olu ion, including AI-
d i en secu i y analy ics, De SecOps in eg a ion, IoT secu i y ex ensions, beha io al biome ics, and mul i-cloud
implemen a ions. I p o ides o ganiza ions wi h s a egic guidance o implemen ing Ze o-T us p inciples o add ess
he inc easingly complex secu i y challenges o mode n digi al business.
Keywo ds: Ze o-T us A chi ec u e; Mic o-Segmen a ion; Iden i y-Based Secu i y; Con inuous Ve i ica ion; Leas -
P i ilege Access
1. In oduc ion
As cybe h ea s con inue o e ol e in sophis ica ion and scale, adi ional pe ime e -based secu i y app oaches a e
p o ing inc easingly inadequa e o en e p ise p o ec ion. Ze o-T us A chi ec u e (ZTA) has eme ged as a p omising
al e na i e secu i y amewo k ha undamen ally challenges con en ional secu i y models by adop ing a "ne e us ,
always e i y" philosophy. The o iginal Ze o T us model, in oduced by Fo es e Resea ch in 2010, emphasized he
need o elimina e he concep o us ed ne wo ks and un us ed ne wo ks, ins ead p oposing ha all ne wo k a ic
should be au hen ica ed and au ho ized ega dless o o igin [1]. Recen esea ch sugges s ha la ge en e p ises
implemen ing comp ehensi e ZTA s a egies expe ience signi ican educ ions in bo h he isk and impac o ad anced
pe sis en h ea s (APTs) compa ed o o ganiza ions elying on adi ional secu i y amewo ks. Acco ding o Ok a's
esea ch spanning secu i y decision make s globally, o ganiza ions wi h ma u e Ze o T us ini ia i es saw subs an ial
educ ion in b each likelihood and epo ed ewe secu i y inciden s o e all compa ed o hose wi hou such p og ams
[2].
1.1. The E olu ion Beyond Pe ime e Secu i y
T adi ional en e p ise secu i y has long ope a ed on a "cas le-and-moa " model, whe e ex e nal de enses a e hea ily
o i ied while in e nal ne wo ks enjoy ela i ely un es ic ed access p i ileges. This app oach assumes ha h ea s
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
969
p ima ily o igina e om ou side he o ganiza ion and ha in e nal ac o s and sys ems can be inhe en ly us ed.
Fo es e 's ounda ional esea ch cha ac e ized his app oach as c ea ing "chewy cen e s" wi hin ne wo ks, whe e once
he ha d ou e shell is b eached, a acke s ind so , ulne able in e io s wi h minimal p o ec ions. Thei analysis
demons a ed ha in adi ional models, he majo i y o secu i y budge s ypically ocused on pe ime e de enses,
lea ing in e nal ne wo ks subs an ially unde -p o ec ed despi e housing he o ganiza ion's mos c i ical da a asse s [1].
This pa adigm pe sis ed despi e clea e idence showing ha a signi ican po ion o da a b eaches o igina ed om
in e nal h ea s a he han ex e nal a acke s.
Table 1 T adi ional s. Ze o-T us Secu i y Models [1]
Aspec
T adi ional Model
Ze o-T us A chi ec u e
T us P emise
T us based on ne wo k loca ion
No implici us ega dless o loca ion
Au hen ica ion
One- ime a pe ime e
Con inuous o all access eques s
Segmen a ion
Coa se (inside s. ou side)
Fine-g ained mic o-segmen a ion
Access
B oad access a e au hen ica ion
Leas -p i ilege o e e y eques
Moni o ing
Focused on pe ime e
All a ic, including in e nal mo emen
Secu i y Pe ime e
Ne wo k bounda y
Iden i y (use and de ice)
The a al law in his model becomes e iden once an a acke b eaches he pe ime e — hey o en gain subs an ial
eedom o mo e la e ally h oughou he ne wo k, accessing sensi i e esou ces wi h minimal addi ional e i ica ion.
NIST Special Publica ion 800-207 no es ha adi ional en e p ise ne wo k secu i y was based on he concep o
ne wo k segmen a ion, bu his model s uggles in mode n en i onmen s whe e en e p ise asse s and esou ces a e
loca ed in mul iple en i onmen s, equi ing en e p ise enginee s o de elop complex, o en in lexible secu i y policies.
Thei esea ch indica es ha in adi ional en i onmen s, once ini ial au hen ica ion occu s a he pe ime e ,
subsequen access eques s wi hin he ne wo k ecei e minimal o no addi ional e i ica ion [3]. In oday's h ea
landscape, cha ac e ized by sophis ica ed social enginee ing, c eden ial he , and inside h ea s, his model has
become dange ously ou da ed. IBM's 2021 da a e ealed in hei Cos o a Da a B each Repo ha o ganiza ions wi h
ully deployed secu i y au oma ion, including Ze o T us p inciples, expe ienced signi ican ly lowe b each cos s
compa ed o o ganiza ions wi hou such capabili ies [4].
2. Co e P inciples o Ze o-T us A chi ec u e
Ze o-T us A chi ec u e ep esen s a undamen al pa adigm shi by elimina ing he concep o implici us . In a ZTA
en i onmen , he app oach is d ama ically di e en :
No use o sys em is us ed by de aul , ega dless o hei loca ion (in e nal o ex e nal o he ne wo k). Fo es e 's
ini ial Ze o T us amewo k es ablished his as he p ima y p inciple, ad oca ing o he e i ica ion o all a ic in all
ne wo k segmen s. Thei implemen a ion guidance s a ed ha o ganiza ions should inspec and log all a ic, en o cing
secu i y policy consis en ly ac oss all ne wo k segmen s ega dless o hei physical o logical loca ion [1]. NIST
guidelines u he expand his p inciple by ecommending a consis en policy en o cemen app oach whe e subjec
iden i y, de ice iden i y and s a e, eques de ails, and en i onmen al a ibu es should all ac o in o access decisions
o e e y esou ce eques [3].
E e y access eques mus be au hen ica ed and au ho ized be o e connec ion is es ablished. Ok a's 2022 S a e o Ze o
T us Secu i y epo indica es ha he as majo i y o o ganiza ions globally now ecognize iden i y as he new
pe ime e o hei secu i y a chi ec u e, wi h mos secu i y decision-make s inc easing hei in es men s in iden i y-
based au hen ica ion se ices. Thei esea ch in ol ing secu i y p o essionals e ealed ha o ganiza ions wi h ma u e
ZTA implemen a ions au hen ica e use s ac oss mul iple di e en au hen ica ion ac o s compa ed o jus a ew ac o s
in less ma u e en i onmen s [2].
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
970
Table 2 Co e Componen s o Ze o-T us A chi ec u e [2]
Componen
P ima y Func ion
Iden i y Managemen
Use au hen ica ion and au ho iza ion
Mul i-Fac o Au hen ica ion
Enhanced iden i y e i ica ion
Mic o-segmen a ion
Ne wo k isola ion and la e al mo emen p e en ion
Endpoin Secu i y
De ice e i ica ion and compliance
Secu i y Moni o ing
Cen alized isibili y and analy ics
Da a P o ec ion
Secu ing sensi i e in o ma ion
Leas -p i ilege access p inciples a e igo ously en o ced in ma u e Ze o T us en i onmen s. NIST's amewo k
speci ically ecommends ha o ganiza ions should ensu e subjec s can only access he esou ces equi ed o legi ima e
asks, wi h access limi ed o he minimum le el necessa y o pe o m he expec ed unc ion. Thei esea ch
demons a es ha o ganiza ions wi h well-implemen ed leas -p i ilege models expe ienced signi ican ly ewe
inciden s o p i ilege escala ion compa ed o hose wi h mo e pe missi e access con ols [3].
Mic o-segmen a ion di ides ne wo ks in o isola ed zones o con ain po en ial b eaches. Fo es e 's Ze o T us model
o iginally ad oca ed o a mic ope ime e and segmen a ion ga eway app oach, whe e o ganiza ions c ea e mul iple,
secu e mic o-pe ime e s o en o ce secu i y con ols be ween a ious ne wo k segmen s. Thei implemen a ion s udies
showed ha o ganiza ions adop ing mic o-segmen a ion con ained secu i y b eaches o a much smalle po ion o
ne wo k esou ces, e sus subs an ial exposu e in adi ional la ne wo k en i onmen s [1].
Con inuous moni o ing and alida ion occu h oughou ac i e sessions. NIST's Special Publica ion 800-207 emphasizes
ha en e p ise sessions should no be de ined by longe i y bu by disc e e access ansac ions. Thei echnical guidance
ecommends ha access o esou ces should be de e mined by policy, including obse able s a e o clien iden i y and
de ice, a he han ne wo k loca ion o add ess. The amewo k es ablishes ha moni o ing sys ems should collec and
analyze nume ous dis inc da a poin s pe session o e ec i ely e alua e isk in eal- ime [3].
Dynamic policy en o cemen based on eal- ime isk assessmen has p o en c i ical o e ec i e Ze o T us
implemen a ions. Acco ding o IBM's secu i y esea ch, o ganiza ions implemen ing dynamic policy en o cemen
wi hin hei secu i y au oma ion amewo ks expe ienced as e iden i ica ion o b eaches and quicke con ainmen
imes, esul ing in subs an ially lowe da a ex il a ion a es [4].
3. Empi ical E idence Suppo ing ZTA E icacy
Resea ch om mul iple sou ces p o ides compelling e idence o ZTA's e ec i eness ac oss nume ous secu i y
dimensions:
Ok a's comp ehensi e 2022 S a e o Ze o T us Secu i y epo , analyzing da a om secu i y decision-make s ac oss
global en e p ises, ound ha o ganiza ions ad ancing hei Ze o T us ini ia i es we e signi ican ly less likely o
expe ience a secu i y b each. Thei esea ch e ealed ha o ganiza ions wi h ma u e ZTA implemen a ions epo ed
subs an ially highe success ul p e en ion o phishing a acks compa ed o success a es in o ganiza ions wi hou ZTA
amewo ks. The s udy u he demons a ed ha he as majo i y o o ganiza ions ha e ei he implemen ed o plan
o implemen a Ze o T us secu i y ini ia i e, ep esen ing a no able inc ease om he p e ious yea 's epo [2].
IBM Secu i y's Cos o a Da a B each Repo demons a ed ha en e p ises u ilizing Ze o-T us p inciples as pa o
hei secu i y au oma ion s a egy expe ienced signi ican ly be e ou comes du ing secu i y inciden s. Thei analysis
showed ha o ganiza ions wi h ully deployed secu i y au oma ion, including Ze o T us p inciples, spen conside ably
less ime in iden i ying and con aining b eaches compa ed o hose wi hou such capabili ies. Fu he mo e, he esea ch
es ablished ha ZTA-enabled o ganiza ions expe ienced subs an ially lowe cos s associa ed wi h egula o y
compliance ailu es and cus ome no i ica ion p ocesses ollowing a b each [4].
NIST's ex ensi e echnical analysis o Ze o T us implemen a ions e ealed speci ic imp o emen s in secu i y
capabili ies ac oss se en key ene s o he amewo k. Thei esea ch demons a ed ha o ganiza ions implemen ing
con inuous diagnos ics and mi iga ion (CDM) sys ems as pa o hei ZTA s a egy imp o ed h ea de ec ion a es
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
971
signi ican ly. The s udy u he showed ha ZTA implemen a ions wi h dynamic policy en o cemen mechanisms
success ully p e en ed he majo i y o la e al mo emen a emp s ollowing an ini ial comp omise, compa ed o much
lowe p e en ion a es in adi ional ne wo ks [3].
Google's BeyondCo p ini ia i e, o en ci ed as one o he mos comp ehensi e eal-wo ld applica ions o ZTA p inciples,
was de eloped ollowing he Ad anced Pe sis en Th ea (APT) a acks agains Google and o he companies in 2009.
By implemen ing con inuous e i ica ion o bo h use and de ice con ex s, Google has demons a ed subs an ial
imp o emen s in secu i y esilience ac oss i s global in as uc u e. Fo es e 's analysis o he BeyondCo p
implemen a ion no ed ha Google achie ed a signi ican educ ion in success ul a acks agains in e nal esou ces while
simul aneously imp o ing employee p oduc i i y by elimina ing adi ional VPN equi emen s ha had p e iously
c ea ed bo lenecks o emo e access [1].
4. Implemen a ion Challenges and Conside a ions
Despi e i s clea bene i s, implemen ing ZTA ac oss la ge en e p ises p esen s se e al signi ican challenges ha
o ganiza ions mus add ess o success ul adop ion. Acco ding o Ga ne 's analysis, a majo i y o secu i y and isk
managemen leade s ci e budge cons ain s as he p ima y obs acle o Ze o T us implemen a ion, while many epo
challenges ela ed o legacy sys em in eg a ion. This implemen a ion complexi y has led o ex ended adop ion imelines,
wi h only a po ion o o ganiza ions ha ing comple ed hei planned Ze o T us ini ia i es, despi e many ha ing begun
implemen a ion p ocesses ea lie [5].
High ini ial in es men cos s o echnology in as uc u e upg ades ep esen one o he p ima y ba ie s o ZTA
adop ion. Ga ne 's Ma ke Guide o Ze o T us Ne wo k Access e eals ha o ganiza ions ypically alloca e a
signi ican po ion o hei secu i y budge s o Ze o T us ini ia i es, wi h la ge en e p ises in es ing subs an ial
amoun s in he i s yea o implemen a ion. While conside able, his in es men mus be iewed in con ex o he
po en ial cos a oidance, as o ganiza ions wi h ma u e Ze o T us amewo ks epo lowe cos s associa ed wi h da a
b eaches compa ed o hose wi hou such p o ec ions [5]. This inancial challenge is pa icula ly acu e o mid-ma ke
o ganiza ions, whe e budge limi a ions o en o ce a mo e inc emen al app oach o implemen a ion, ex ending p ojec
imelines compa ed o en e p ises wi h dedica ed secu i y budge s.
Table 3 Implemen a ion Challenges and Mi iga ions [5]
Challenge
E ec i e Mi iga ion
High ini ial cos s
Phased implemen a ion, ocus on high- isk a eas i s
Legacy sys em in eg a ion
Middlewa e solu ions, g adual mig a ion
Wo k low dis up ions
Comp ehensi e es ing, use aining, phased ollou
O ganiza ional esis ance
Execu i e sponso ship, business case de elopmen
Technical skill gaps
S a aining, ex e nal expe ise, managed se ices
In eg a ion complexi y wi h legacy sys ems and applica ions p esen s ano he o midable challenge in Ze o T us
implemen a ion. Resea ch om he implemen a ion s a egies e ec i eness analysis indica es ha many o ganiza ions
s uggle o in eg a e Ze o T us p inciples wi h legacy applica ions ha we e no designed o mode n au hen ica ion
amewo ks. The s udy o secu i y p o essionals e ealed ha o ganiza ions wi h olde sys ems spen conside ably
longe on in eg a ion e o s compa ed o hose wi h mo e mode n in as uc u es. Legacy in eg a ion challenges
ypically consumed a subs an ial po ion o o al p ojec implemen a ion ime, wi h o ganiza ions equi ing signi ican
pe son-days o adap exis ing sys ems o unc ion wi hin a Ze o T us amewo k [6]. These in eg a ion complexi ies
o en necessi a e in e im secu i y measu es du ing ansi ion pe iods, c ea ing po en ial secu i y gaps ha mus be
ca e ully managed h oughou he implemen a ion p ocess.
Po en ial p oduc i i y impac s du ing ansi ion phases ep esen a signi ican conce n o o ganiza ional leade ship
conside ing Ze o T us adop ion. Acco ding o de ailed implemen a ion analysis, mos o ganiza ions epo empo a y
wo k low dis up ions du ing ini ial Ze o T us deploymen , pa icula ly ela ed o mo e s ingen au hen ica ion
equi emen s. Use s equi ed ime o adap o new au hen ica ion p ocesses, wi h help desk calls inc easing du ing he
i s mon h o implemen a ion. O ganiza ions ha implemen ed comp ehensi e use aining p og ams p io o
deploymen expe ienced ewe dis up ion epo s and as e use adap a ion compa ed o hose ha deployed wi hou
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
972
adequa e p epa a ion [6]. The esea ch u he indica ed ha phased implemen a ions, ocusing on speci ic use g oups
o applica ion segmen s, esul ed in less ope a ional dis up ion compa ed o en e p ise-wide deploymen s, highligh ing
he impo ance o s a egic ollou planning.
O ganiza ional esis ance o s ic e access con ols mani es s ac oss mul iple le els o he en e p ise and p esen s a
signi ican ba ie o success ul Ze o T us implemen a ion. Acco ding o he In e na ional Resea ch Jou nal o
Enginee ing and Technology's analysis, a majo i y o Ze o T us implemen a ions encoun e ed esis ance om senio
managemen conce ned abou business p oduc i i y impac s, while e en mo e aced esis ance om gene al use s
eluc an o adop addi ional au hen ica ion s eps. O ganiza ions ha posi ioned Ze o T us as a business enable a he
han a secu i y cons ain expe ienced less o ganiza ional esis ance and achie ed as e implemen a ion imelines. The
s udy no ed ha success ul implemen a ions ypically in ol ed s akeholde s om ac oss business unc ions, wi h
mul iple dis inc depa men s pa icipa ing in planning p ocesses, compa ed o ew depa men s in less success ul
implemen a ions [7]. This c oss- unc ional app oach helped o ganiza ions iden i y po en ial wo k low dis up ions and
de elop app op ia e mi iga ion s a egies be o e hey impac ed p oduc i i y.
Technical skill gaps in implemen ing ad anced ZTA componen s p esen a signi ican ba ie o success ul deploymen ,
wi h Ma ke s and Ma ke s esea ch indica ing ha many o ganiza ions epo di icul y inding pe sonnel wi h
app op ia e Ze o T us expe ise. This skill sho age has c ea ed a compe i i e hi ing ma ke , wi h Ze o T us specialis s
commanding sala y p emiums abo e gene al secu i y oles. O ganiza ions ha e add essed his gap h ough a ious
s a egies, wi h many pa ne ing wi h ex e nal se ice p o ide s, in es ing in in e nal aining p og ams, and adop ing
managed secu i y se ices o supplemen in e nal capabili ies. The global sho age o quali ied Ze o T us p o essionals
had con ibu ed o implemen a ion delays ac oss su eyed o ganiza ions [8]. This capabili y gap is pa icula ly
p onounced in specialized Ze o T us domains such as mic o-segmen a ion design and implemen a ion, whe e
ela i ely ew o ganiza ions epo ha ing su icien in e nal expe ise o execu e wi hou ex e nal suppo .
These challenges highligh he need o a phased implemen a ion app oach, whe e o ganiza ions g adually ansi ion
c i ical sys ems o he ze o- us model while ca e ully managing he echnical and o ganiza ional changes equi ed.
Ga ne ecommends a p og essi e implemen a ion s a egy ha p io i izes high- alue asse s and c i ical access pa hs,
no ing ha o ganiza ions aking his app oach achie ed as e secu i y ma u i y compa ed o hose a emp ing
comp ehensi e implemen a ion simul aneously. Thei analysis indica es ha success ul implemen a ions ypically
p og ess h ough dis inc phases o e ex ended pe iods, wi h each phase building upon es ablished capabili ies while
expanding p o ec ion scope. O ganiza ions ollowing his s uc u ed app oach epo ed ewe implemen a ion ailu es
and be e adhe ence o planned imelines compa ed o hose a emp ing accele a ed deploymen s [5]. This measu ed
app oach allows o ganiza ions o demons a e inc emen al secu i y imp o emen s, building o ganiza ional con idence
while managing esou ce cons ain s mo e e ec i ely.
5. Bes P ac ices o ZTA Implemen a ion
Based on ex ensi e esea ch and case s udies o success ul ZTA deploymen s, se e al bes p ac ices ha e eme ged ha
signi ican ly imp o e implemen a ion ou comes and accele a e secu i y bene i s. Ga ne 's analysis o Ze o T us
implemen a ions iden i ied ha o ganiza ions ollowing o malized bes p ac ices achie ed ull secu i y ma u i y as e
han hose wi hou s uc u ed app oaches. Thei esea ch pa icula ly emphasized he impo ance o clea scope
de ini ion, wi h o ganiza ions es ablishing conc e e success me ics expe iencing highe sa is ac ion wi h
implemen a ion ou comes compa ed o hose wi h ambiguous objec i es. Mos success ul implemen a ions es ablished
speci ic, measu able success c i e ia aligned wi h business objec i es a he han ocusing exclusi ely on echnical
me ics [5].
S a ing wi h iden i y and access managemen (IAM) as he ounda ion p o ides c i ical ea ly success in Ze o T us
implemen a ion. Implemen a ion s a egies analysis e eals ha mos success ul Ze o T us deploymen s began wi h a
comp ehensi e e alua ion and enhancemen o exis ing iden i y sys ems. O ganiza ions ha p io i ized iden i y
mode niza ion as hei ini ial s ep achie ed desi ed secu i y ou comes as e on a e age han hose beginning wi h
ne wo k con ols. The esea ch indica ed ha e ec i e iden i y ounda ions educed subsequen implemen a ion
challenges, pa icula ly o complex componen s such as mic o-segmen a ion and con ex ual access. O ganiza ions
ypically in es ed a subs an ial po ion o hei ini ial Ze o T us budge s in iden i y solu ions, wi h his in es men
di ec ly co ela ing o educed implemen a ion ime ames o subsequen secu i y con ols [6]. This iden i y-cen ic
app oach es ablished he c i ical au hen ica ion and au ho iza ion capabili ies upon which all o he Ze o T us
componen s depend, c ea ing a s ong ounda ion o comp ehensi e secu i y.
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
973
Table 4 Phased Implemen a ion App oach [6]
Phase
Focus A eas
Key Ac i i ies
Assessmen
Cu en s a e analysis
In en o y asse s, de ine success me ics
Founda ion
Iden i y in as uc u e
Implemen IAM, deploy MFA
C i ical Asse s
High- alue sys ems
Apply mic o-segmen a ion o c i ical sys ems
Expansion
B oade co e age
Ex end con ols, enhance analy ics
Op imiza ion
Ad anced capabili ies
Implemen beha io al analy ics, IoT/OT in eg a ion
Implemen ing s ong mul i- ac o au hen ica ion (MFA) ac oss all access poin s deli e s immedia e secu i y bene i s
du ing Ze o T us ansi ions. Acco ding o he In e na ional Resea ch Jou nal o Enginee ing and Technology,
o ganiza ions implemen ing comp ehensi e MFA as pa o hei Ze o T us ini ia i es epo ed ewe success ul
accoun comp omise a acks compa ed o p e-implemen a ion baselines. Despi e his e ec i eness, less han hal o
su eyed o ganiza ions had implemen ed MFA ac oss all c i ical sys ems, wi h implemen a ion a es pa icula ly low
o ope a ional echnology en i onmen s. O ganiza ions ci ing he highes sa is ac ion wi h MFA deploymen s ypically
implemen ed isk-based au hen ica ion app oaches ha balanced secu i y equi emen s wi h use expe ience,
esul ing in lowe use esis ance compa ed o s a ic MFA implemen a ions [7]. The s udy no ed ha o ganiza ions
o e ing mul iple au hen ica ion op ions achie ed highe use sa is ac ion sco es while main aining obus secu i y
pos u es.
De eloping a comp ehensi e asse in en o y o unde s and wha needs p o ec ion p o ides c i ical isibili y o
e ec i e Ze o T us con ols. Implemen a ion e ec i eness analysis demons a es ha many o ganiza ions disco e ed
p e iously unknown o shadow IT asse s du ing hei Ze o T us implemen a ion p ocess. On a e age, hese disco e y
p ocesses iden i ied subs an ially mo e asse s han we e p e iously documen ed in en e p ise in en o ies.
O ganiza ions ha in es ed in au oma ed asse disco e y ools achie ed g ea e accu acy in esou ce classi ica ion and
educed hei disco e y ime ames compa ed o manual in en o y p ocesses. The esea ch ecommends alloca ing a
po ion o implemen a ion budge s o asse disco e y and classi ica ion ac i i ies, no ing ha his in es men yielded
signi ican e u ns h ough mo e p ecise secu i y con ol implemen a ion and educed p o ec ion gaps [6]. This
comp ehensi e isibili y allows o ganiza ions o app op ia ely classi y asse s acco ding o sensi i i y and c i icali y,
enabling p opo iona e p o ec ion measu es aligned wi h business isk.
Designing and implemen ing ne wo k mic o-segmen a ion based on esou ce sensi i i y ep esen s one o he mos
challenging bu aluable aspec s o ZTA deploymen . The In e na ional Resea ch Jou nal o Enginee ing and
Technology's analysis indica es ha o ganiza ions implemen ing comp ehensi e mic o-segmen a ion expe ienced
ewe ins ances o la e al mo emen du ing secu i y b eaches. Howe e , his implemen a ion ypically equi ed
signi ican esou ces, wi h o ganiza ions epo ing subs an ial pe son-hou s dedica ed o segmen a ion design and
implemen a ion o each majo business uni . The esea ch ound ha he mos success ul app oaches began wi h
c i ical da a eposi o ies, es ablishing p o ec ion zones a ound he o ganiza ion's mos sensi i e in o ma ion be o e
expanding o b oade in as uc u e. O ganiza ions implemen ing mic o-segmen a ion in his p io i ized manne
achie ed p o ec ion o hei mos c i ical asse s ea lie han hose a emp ing b oade implemen a ion app oaches [7].
This a ge ed s a egy allowed secu i y eams o demons a e meaning ul isk educ ion o high- alue asse s while
de eloping he expe ise needed o wide deploymen .
Es ablishing con inuous moni o ing and analy ics capabili ies enables o ganiza ions o de ec and espond o po en ial
secu i y inciden s mo e e ec i ely. Ga ne 's esea ch indica es ha o ganiza ions wi h ma u e Ze o T us moni o ing
de ec secu i y anomalies as e han hose wi hou such capabili ies. These moni o ing sys ems ypically collec and
analyze mul iple dis inc da a poin s pe use session, allowing o mo e accu a e isk assessmen s and access decisions.
O ganiza ions alloca ing a signi ican po ion o hei Ze o T us budge s o moni o ing and analy ics solu ions epo ed
g ea e sa is ac ion wi h hei abili y o de ec unau ho ized access a emp s. These enhanced de ec ion capabili ies
ansla ed di ec ly o secu i y ou comes, wi h moni o ed en i onmen s expe iencing lowe dwell imes o a acke s
compa ed o adi ional secu i y app oaches [5]. This con inuous isibili y in o use and sys em beha io allows
o ganiza ions o apidly iden i y po en ial secu i y inciden s and au oma ically adjus access pe missions based on
obse ed isk ac o s.
C ea ing clea secu i y policies ha en o ce leas -p i ilege access ensu es consis en applica ion o Ze o T us
p inciples. Implemen a ion s a egies esea ch ound ha o ganiza ions wi h documen ed, g anula access policies
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
974
expe ienced ewe p i ilege escala ion inciden s han hose wi h b oadly de ined pe missions. De eloping e ec i e
policies equi ed subs an ial e o , wi h o ganiza ions epo ing signi ican pe son-days spen on policy de elopmen
pe business uni . Howe e , his in es men yielded signi ican e u ns, wi h mos secu i y leade s epo ing imp o ed
egula o y compliance ou comes ollowing policy implemen a ion. The mos e ec i e policy amewo ks es ablished
mul iple dis inc access le els based on job unc ions and da a sensi i i y, p o iding su icien g anula i y wi hou
c ea ing unmanageable complexi y [6]. O ganiza ions ha de eloped hese policies h ough collabo a i e p ocesses
in ol ing bo h secu i y and business s akeholde s achie ed highe policy e ec i eness sco es and lowe excep ion
eques olumes compa ed o secu i y-dic a ed app oaches.
Conduc ing egula secu i y awa eness aining o suppo he cul u al shi p o ides essen ial use accep ance.
Acco ding o he In e na ional Resea ch Jou nal o Enginee ing and Technology, o ganiza ions in es ing subs an ial
ime annually pe employee in secu i y awa eness aining expe ienced highe use sa is ac ion wi h Ze o T us
con ols. The esea ch indica ed ha success ul aining p og ams ocused no only on echnical p ocedu es bu also on
explaining he secu i y a ionale behind Ze o T us con ols, wi h use s who unde s ood hese easons epo ing
g ea e willingness o comply wi h secu i y equi emen s. O ganiza ions alloca ing a po ion o hei Ze o T us
implemen a ion budge s o use educa ion achie ed ewe implemen a ion delays ela ed o use esis ance compa ed
o hose in es ing minimally [7]. This educa ional in es men ans o med use s om po en ial obs acles in o secu i y
ad oca es, wi h ained employees mo e likely o epo po en ial secu i y anomalies compa ed o un ained s a .
Table 5 Ze o-T us Ma u i y Le els [7]
Ma u i y Le el
Key Cha ac e is ics
Ini ial
Basic au hen ica ion, pe ime e - ocused moni o ing
De eloping
Expanded MFA, enhanced logging, semi-au oma ed esponses
Es ablished
Risk-based au hen ica ion, comp ehensi e moni o ing
Ad anced
Adap i e au hen ica ion, eal- ime h ea de ec ion
Op imized
Con ex ual au hen ica ion, AI-d i en analy ics, au oma ed ope a ions
O ganiza ions should also conside le e aging specialized Ze o-T us Ne wo k Access (ZTNA) solu ions ha can
s eamline implemen a ion while p o iding comp ehensi e secu i y con ols. Ma ke s and Ma ke s analysis shows ha
he global Ze o T us secu i y ma ke size is p ojec ed o g ow subs an ially om 2022 o 2027, ep esen ing signi ican
annual g ow h du ing he o ecas pe iod. O ganiza ions u ilizing pu pose-buil ZTNA solu ions achie ed ull
implemen a ion as e han hose building cus om solu ions, while ealizing lowe o al cos o owne ship o e mul i-
yea pe iods. The esea ch indica es ha No h Ame ica held he la ges ma ke sha e in he Ze o T us secu i y ma ke ,
ollowed by Eu ope and Asia Paci ic egions. The ising demand o Ze o T us secu i y solu ions ac oss egions is
p ima ily d i en by he inc eased equency and sophis ica ion o cybe h ea s, wi h mos o ganiza ions ci ing
imp o ed h ea p o ec ion as hei p ima y d i e o adop ion [8]. This ma ke g ow h has c ea ed a obus ecosys em
o specialized solu ions add essing a ied aspec s o Ze o T us implemen a ion, o e ing o ganiza ions mo e accessible
pa hs o implemen a ion ega dless o hei in e nal capabili ies.
The au ho ’s expe ience leading Ze o T us ini ia i es a LinkedIn and Amazon p o ides unique insigh s. Deploying
wo kload-based iden i y policies signi ican ly educed manual access con ol lis managemen . Adap i e au hen ica ion
s a egies eplaced VPN usage, s eamlining secu e access o emo e eams. Au oma ed c yp og aphic ce i ica e
li ecycle managemen minimized se ice dis up ions and inc eased compliance. These ield obse a ions unde sco e
he impo ance o in eg a ing Ze o T us in o b oade in as uc u e mode niza ion p og ams, whe e secu i y becomes
a co e design p inciple a he han a eac i e o e lay.
6. Fu u e Di ec ions in Ze o-T us
As ZTA con inues o ma u e, se e al eme ging ends a e shaping i s e olu ion and expanding i s capabili ies o add ess
e ol ing secu i y challenges. Ga ne 's o wa d-looking analysis p ojec s ha by he mid-2020s, a majo i y o
en e p ises will use Ze o T us as a p ima y componen o hei secu i y s a egy, up om a small mino i y in he ea ly
2020s. This accele a ing adop ion is d i en by bo h moun ing secu i y conce ns and e ol ing echnology capabili ies
ha educe implemen a ion ba ie s. Thei esea ch p edic s ha o ganiza ions wi h ma u e Ze o T us
implemen a ions will expe ience ewe iden i y-based b eaches and less inancial impac om cybe secu i y inciden s
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
975
compa ed o o ganiza ions wi hou such p o ec ions [5]. These subs an ial secu i y imp o emen s a e d i ing
con inued in es men despi e implemen a ion challenges, wi h o ganiza ions inc easingly iewing Ze o T us no as
op ional secu i y enhancemen bu as a undamen al equi emen o mode n isk managemen .
AI-d i en secu i y analy ics o enhance h ea de ec ion and esponse ep esen s a signi ican ad ancemen in Ze o
T us capabili ies. Implemen a ion s a egies esea ch indica es ha o ganiza ions implemen ing AI-enhanced secu i y
analy ics wi hin hei Ze o T us amewo ks iden i y mo e po en ial h ea s and educe alse posi i es compa ed o
adi ional ule-based sys ems. These solu ions ypically p ocess subs an ial olumes o secu i y da a daily in la ge
en e p ise en i onmen s, applying machine lea ning algo i hms o iden i y abno mal pa e ns ha migh indica e
comp omise. The s udy p ojec s ha in he coming yea s, a majo i y o en e p ise Ze o T us implemen a ions will
inco po a e AI-d i en analy ics, wi h o ganiza ions in es ing a meaning ul po ion o hei secu i y budge s in hese
capabili ies [6]. This analy ical e olu ion add esses one o he p ima y challenges o Ze o T us implemen a ion – he
eno mous olume o secu i y da a gene a ed by con inuous e i ica ion p ocesses – by au oma ing analysis and ocusing
human a en ion on genuine secu i y conce ns.
In eg a ion wi h De SecOps p ocesses o secu e applica ion de elopmen ex ends Ze o T us p inciples in o he
so wa e de elopmen li ecycle. The In e na ional Resea ch Jou nal o Enginee ing and Technology esea ch indica es
ha o ganiza ions implemen ing "Ze o T us by Design" in hei de elopmen pipelines expe ience ewe secu i y
ulne abili ies in p oduc ion applica ions. These app oaches ypically in ol e con inuous e i ica ion a each s age o
de elopmen , wi h nume ous dis inc secu i y checks pe o med au oma ically be o e code eaches p oduc ion
en i onmen s. The in eg a ion o Ze o T us p inciples wi h De SecOps has g own apidly, wi h a signi ican po ion o
en e p ises epo ing ac i e p ojec s in his a ea, ep esen ing a subs an ial inc ease o e p e ious yea s. O ganiza ions
adop ing hese in eg a ed app oaches educed hei mean ime o emedia e iden i ied ulne abili ies compa ed o
adi ional secu i y es ing models [7]. This shi -le app oach o secu i y ensu es ha Ze o T us p inciples a e
embedded wi hin applica ions om concep ion a he han applied as ex e nal con ols a e deploymen , c ea ing
mo e inhe en ly secu e applica ions while educing emedia ion cos s.
Ex ended ze o- us p inciples o IoT en i onmen s and ope a ional echnology add ess g owing conce ns a ound non-
adi ional compu ing asse s. Implemen a ion e ec i eness analysis shows ha a la ge majo i y o o ganiza ions epo
signi ican conce ns abou IoT secu i y, ye only a mino i y ha e ex ended Ze o T us con ols o hese en i onmen s.
O ganiza ions implemen ing comp ehensi e IoT secu i y wi hin Ze o T us amewo ks expe ienced ewe secu i y
inciden s in ol ing connec ed de ices. Howe e , implemen a ion challenges emain subs an ial, wi h o ganiza ions
epo ing ha secu ing IoT de ices equi es mo e e o pe asse han adi ional IT esou ces. The esea ch p ojec s
ha IoT p o ec ion will ep esen a g owing sha e o Ze o T us secu i y spending in coming yea s, d i en p ima ily by
he p oli e a ion o connec ed de ices in indus ial and heal hca e en i onmen s [6]. This ex ension o Ze o T us
p inciples beyond adi ional compu ing en i onmen s e lec s he expanding a ack su ace aced by mode n
o ganiza ions, whe e adi ional ne wo k bounda ies ha e become inc easingly i ele an .
Enhanced iden i y e i ica ion h ough beha io al biome ics and con ex ual au hen ica ion imp o es secu i y while
educing use ic ion. Ga ne 's analysis ound ha o ganiza ions implemen ing ad anced beha io al analy ics educed
au hen ica ion ic ion while imp o ing secu i y pos u e. These sys ems ypically analyze many dis inc beha io al
pa e ns, om yping cadence o applica ion usage pa e ns, o c ea e ongoing isk sco es wi hou use in e en ion.
The adop ion o hese echnologies is accele a ing, wi h many en e p ises planning implemen a ion in he nea u u e,
d i en by bo h secu i y bene i s and imp o ed use expe ience. O ganiza ions implemen ing hese ad anced
au hen ica ion app oaches epo ed highe use sa is ac ion wi h secu i y p ocesses compa ed o adi ional
au hen ica ion me hods [5]. This e olu ion owa d in isible au hen ica ion ep esen s a signi ican ad ancemen in
add essing one o he p ima y challenges o Ze o T us implemen a ion – balancing secu i y equi emen s wi h use
expe ience – by shi ing e i ica ion p ocesses away om explici use ac ions owa d con inuous backg ound
assessmen .
Ze o- us o mul i-cloud and hyb id cloud en i onmen s add esses he inc easingly dis ibu ed na u e o en e p ise
compu ing esou ces. Ma ke s and Ma ke s esea ch indica es ha a as majo i y o en e p ises now ope a e in mul i-
cloud en i onmen s, c ea ing signi ican secu i y challenges ha Ze o T us p inciples can add ess. O ganiza ions
implemen ing consis en Ze o T us con ols ac oss cloud en i onmen s expe ienced ewe cloud secu i y inciden s
compa ed o hose using p o ide -speci ic secu i y models. Howe e , achie ing his consis ency equi es subs an ial
e o , wi h en e p ises epo ing conside able pe son-mon hs dedica ed o es ablishing c oss-cloud secu i y
amewo ks. Despi e hese challenges, mos o ganiza ions ci e mul i-cloud Ze o T us as a c i ical p io i y, wi h
p ojec ed in es men inc easing annually o he o eseeable u u e. The cloud secu i y segmen is expec ed o g ow a
he highes a e du ing he o ecas pe iod, e lec ing he accele a ing mig a ion o en e p ise wo kloads o cloud
In e na ional Jou nal o Science and Resea ch A chi e, 2025, 26(02), 968-977
976
en i onmen s [8]. This cloud- ocused expansion o Ze o T us add esses he eali y ha mode n en e p ises ope a e
ac oss inc easingly complex hyb id in as uc u es, equi ing secu i y models ha p o ide consis en p o ec ion
ega dless o esou ce loca ion.
These de elopmen s p omise o u he s eng hen he e icacy o ZTA in add essing e ol ing h ea landscapes while
imp o ing usabili y and educing implemen a ion ic ion. As Ze o T us p inciples con inue o e ol e and expand
ac oss en e p ise en i onmen s, o ganiza ions ha emb ace hese ad ancemen s will be be e posi ioned o add ess
he inc easingly complex secu i y challenges o mode n digi al business.
7. Conclusion
Ze o-T us A chi ec u e ep esen s a undamen al econcep ualiza ion o en e p ise secu i y s a egy, mo ing om
loca ion-based us o con inuous e i ica ion o e e y access eques ega dless o sou ce. As documen ed by
Fo es e , NIST, IBM, and o he leading secu i y o ganiza ions, his app oach signi ican ly s eng hens secu i y pos u es
agains bo h ex e nal and in e nal h ea s by elimina ing implici us and en o cing e i ica ion a e e y access poin .
The e idence p esen ed h oughou his a icle demons a es ha while ZTA implemen a ion p esen s meaning ul
challenges—including ini ial in es men cos s, legacy in eg a ion complexi ies, and o ganiza ional esis ance— he
secu i y bene i s subs an ially ou weigh hese obs acles when implemen a ion ollows p o en bes p ac ices. The
ansi ion o Ze o-T us equi es o ganiza ions o adop a phased, s a egic app oach ha begins wi h s ong iden i y
ounda ions and p og essi ely expands o encompass all en e p ise esou ces. Success ul implemen a ions ha e
consis en ly demons a ed imp o ed secu i y ou comes, pa icula ly in educing la e al mo emen oppo uni ies o
a acke s and minimizing he impac o b eaches when hey occu . As highligh ed by Ga ne 's esea ch, o ganiza ions
ha ollow s uc u ed implemen a ion app oaches achie e secu i y ma u i y as e and wi h ewe dis up ions han
hose a emp ing comp ehensi e deploymen s simul aneously. Looking ahead, he e olu ion o Ze o-T us p inciples
will con inue o be shaped by ad ancemen s in a i icial in elligence, beha io al analy ics, and cloud-na i e
a chi ec u es. The in eg a ion o Ze o-T us concep s wi h De SecOps p ocesses p omises o ex end secu i y
e i ica ion h oughou he applica ion de elopmen li ecycle, add essing ulne abili ies ea lie and mo e e ec i ely.
Simila ly, he ex ension o Ze o-T us con ols o IoT en i onmen s and ope a ional echnology will become
inc easingly c i ical as o ganiza ions' digi al oo p in s con inue o expand beyond adi ional compu ing bounda ies.
As he esea ch om Ma ke s and Ma ke s indica es, he g ow h ajec o y o Ze o-T us echnologies e lec s bo h he
p essing need o mo e obus secu i y models and he demons a ed e ec i eness o his app oach when p ope ly
implemen ed. O ganiza ions ha emb ace Ze o-T us p inciples posi ion hemsel es no only o be e wi hs and
oday's sophis ica ed h ea s bu also o adap mo e eadily o he e ol ing secu i y challenges o omo ow's
inc easingly dis ibu ed digi al landscape. This adap i e capabili y ep esen s pe haps he mos compelling a gumen
o Ze o-T us adop ion: beyond add essing cu en ulne abili ies, i es ablishes a secu i y amewo k undamen ally
be e aligned wi h he echnical and ope a ional eali ies o mode n en e p ise compu ing.
Re e ences
[1] John Kinde ag, “No Mo e Chewy Cen e s: In oducing The Ze o T us Model O In o ma ion Secu i y,”
Sep embe 14, 2010, Fo es e , A ailable: h ps://media.paloal one wo ks.com/documen s/Fo es e -No-
Mo e-Chewy-Cen e s.pd
[2] Ok a, “The S a e o Ze o T us Secu i y 2022,” 2022, Online, A ailable:
h ps://www.ok a.com/si es/de aul / iles/2022-08/OK a_Whi ePape _S a eo Ze oT us Secu i y_FINAL.pd
[3] Sco Rose, e al, “Ze o T us A chi ec u e,” NIST, Augus 2020, A ailable:
h ps://n lpubs.nis .go /nis pubs/specialpublica ions/NIST.SP.800-207.pd
[4] IBM, “IBM: Cos o a Da a B each Repo ,” Compu e F aud & Secu i y, Volume 2021, A ailable:
h ps://www.sciencedi ec .com/science/a icle/abs/pii/S1361372321000828
[5] Aa on McQuaid, e al, “Ma ke Guide o Ze o T us Ne wo k Access,” 14 Augus 2023, Online, A ailable:
h ps://ze o us .cio.com/wp-con en /uploads/si es/64/2024/08/Ga ne -Rep in .pd
[6] Sandeep Reddy Gudime la, “ZERO TRUST SECURITY MODEL: IMPLEMENTATION STRATEGIES AND
EFFECTIVENESS ANALYSIS,” May 2024, In e na ional Resea ch Jou nal o Inno a ions in Enginee ing and
Technology, A ailable:
h ps://www. esea chga e.ne /publica ion/382365430_ZERO_TRUST_SECURITY_MODEL_IMPLEMENTATION_
STRATEGIES_AND_EFFECTIVENESS_ANALYSIS
