A zero-trust security model provides a framework to deploy cloud resources in a secure way but it requires significant time and effort. You must commit to making incremental advances over time to establish and maintain secure approaches. The first step toward establishing a zero-trust model is to implement identity and access controls.