Zero trust assumes there is no implicit trust granted to assets or user accounts based solely on their physical or network location (ie. local area networks versus the internet) or based on asset ownership (enterprise or personally owned).