In this conversation, Sujit Christy and Sithira Wanniarachchi discuss the adoption of zero trust in the organizations. They discuss the importance of continuously authenticating and verifying access to various information assets applying the principles of least privilege and need to do. The adoption of zero trust in Sri Lanka requires a cultural shift in the organizations and should include partners and suppliers. They emphasize the need for organizations to identify and protect their information assets to reduce the attack surface, and involve all stakeholders in the implementation of zero trust.