Hacker News Reader

How about the whole Zero Trust concept where network is assumed hostile and every service is properly authed?

compliance != security. Good luck telling the auditor about zero trust.

Your company hires the audit. Interview the to find one that gets zero trust.