A security model that requires strict identity verification for every person and device trying to access resources.