Zero Trust is "a collection of concepts and ideas designed to minimize uncertainty in enforcing accurate, least privilege per-request access decisions in information systems and services in the face of a network viewed as compromised." (NIST SP 800-207) Zero Trust concepts assume that a breach is inevitable or has likely already occurred, so implementations constantly monitor for anomalous or malicious activity and continuously verify and limit access to automatically contain damage from the breach. To continuously verify and limit access, Zero Trust concepts focus on allowing only authorized entities to access network resources by making access control decisions and enforcement as granular as possible.