Zero Trust Architecture Fundamentals
Studying the technical architecture behind Zero Trust, beyond the governance alignment work I've done collaborating with security architects.
Where I am: early — working through NIST 800-207 and mapping it against IGA concepts I already know well. My real-world exposure so far has been collaborating with security architects to align IGA processes with Zero Trust principles at a governance level; this path is about understanding the full technical architecture, not just the governance slice of it.
- 1
NIST SP 800-207: Zero Trust Architecture
The reference framework — core principles, logical components, and deployment models.
NIST SP 800-207 - 2
Policy Decision Point / Policy Enforcement Point model
How access decisions get centralized and enforced per-request, and how that relates to the SoD and policy engines I already work with in IGA.
- 3
Device posture and continuous evaluation
What Zero Trust adds beyond identity — device trust signals as a first-class input to access decisions, not just network location.
- 4
Where IGA governance fits into a Zero Trust model
Mapping what I already own (identity governance, entitlement decisions) onto the broader Zero Trust picture, to understand the boundary clearly.