NIST SP 800-207 — Zero Trust Architecture

Defines zero-trust principles based on continuous verification, least privilege and resource-focused access decisions rather than network location.