Glossary

Zero-trust controls that limit privilege escalation, just-in-time elevation, strong MFA at elevation, device-trust requirements for admin actions, scoped tokens, that reduce what an attacker can do with a foothold.

Even in ZTA, attackers will sometimes get a foothold; the question is how far they can escalate from there. ZTA privilege escalation controls are the defensive layer that limits this: just-in-time elevation with strong MFA, device-trust requirements for admin actions, scoped and short-lived tokens, separation of admin from regular accounts, continuous verification during privileged sessions. As a ZTA topic, these controls are how the architecture remains useful even when initial defenses don't hold.

Introduced in: Zero Trust Architecture

No related terms linked yet.