I get asked two questions at least weekly, in some cases almost daily:

  1. Where do we start for Zero Trust? — Fix your IAM and user side of the equation.
  2. What is the difference between other frameworks and Zero Trust? — OK, now we can get down to the nuts and bolts on this one.

https://go.forrester.com/blogs/the-tao-of-zero-trust/