Abstract

The paper examines the application of zero trust architecture to the digital infrastructure of a higher education institution where local information systems, cloud services, personal devices, and remote access coexist. The traditional assumption that an internal network location is sufficient for trust is rejected. A staged implementation model is proposed: asset inventory, stronger identity assurance, device posture control, least-privilege access, segmentation, centralized logging, and automated response. Zero trust is treated not as a standalone product but as a policy and architecture principle requiring continuous verification of user identity, device state, context, and resource criticality.