Does zero trust mean monitoring employees?

No. Zero trust is about not granting access on trust alone: every device and account proves itself, gets only what it needs, and its access is checked continuously. That concerns devices, accounts and connections, not people's work, and it does not require reading anyone's content. It does involve logging, such as sign-ins, device health and network connections, so be transparent: tell staff what is logged, why and for how long, involve the works council where there is one, and carry out a data protection impact assessment where the law requires it. Keep the data minimal and the purpose limited to security. NetSenX is built that way: it watches devices and connections, not people, analyses connection metadata to detect attacks, never decrypts traffic and does not score or rank employees. Its alerts name hosts and addresses; when an alert needs a person's context, that step stays within your own process.

← All 45 questions on Zero trust, identity and segmentationAll topics