How does Zero trust architecture support the objective “continuously verifies access using identity, device, resource, and risk context”?

Question

SecurityTalent knowledge answer. Members may add responsible, source-based context; do not post secrets, personal data, exam dumps or recalled live exam questions.

 · Accepted Answer

Zero trust architecture is a cybersecurity control or practice. It supports this objective: continuously verifies access using identity, device, resource, and risk context. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.

ISO/IEC 27001:2022: https://www.iso.org/standard/27001