A security framework requiring strict identity verification for every person and device trying to access resources.