**Never trust, always verify. All network devices are untrusted until they have been authenticated** ​

The CSAP Zero-Trust Foundation (ZTF) is a zero-trust implementation as might be used in any enterprise adopting zero-trust but with certain functionality that should be included. Examples of Zero Trust include:​

• Authenticate each user before they are allowed to join or access a workflow/system​  
• Authenticate all systems and services before being used in any workflow​  
• Ensure all service communication is directed through a policy enforcement point​  
• Validate certificates used for authentication against a trusted certificate authority before being accepted​  
• Mutually authenticate connections between two systems or services​  
• Establish an encrypted connection via Mutual Authentication before communication between proxies/endpoints can take place​

**Zero Trust Compliance** ​

Our experienced assessors within the ConvergentDS team, will assess your environment for Zero Trust compliance providing advice, guidance and priorities for  any remediation.

[**Learn More**](https://www.convergentds.com/contact-us)