Federal agencies are urged to adopt what’s known as the Zero Trust framework. The Zero Trust framework relies on doing away with assumption or inheritance of trust, as well as on finer-grained access controls and narrowly defined zones of access. It also relies on policy enforcement points (PEPs) that create micro-segmentations of the enterprise network, requiring authorization and access control decisions/validations for each boundary crossing as well as for access to a new resource, application, or to initiate a new workload.