Has your organization configured log generators to capture the data required for zero-trust architecture implementation?

Zero-trust architectures require comprehensive logging of authentication attempts, access requests, network traffic, and system activities to verify user identities and enforce least-privilege access continuously. This includes configuring logs to capture user context (identity, device, location), resource access attempts, authentication events, and anomalous behaviors that might indicate security incidents.

Evidence could include documentation of logging configurations across systems, sample logs showing the capture of zero-trust relevant data points, or configuration files for log generators that demonstrate the collection of identity, device, network, and access information required for zero-trust decision-making.