During this breakout session, we delve deeper into Zero Trust security by exploring the foundational concepts that apply at the organizational level. We move beyond the buzzwords to understand how this security model offers a comprehensive and adaptive approach to minimize the risk of cyber-attacks and breaches. We also touch on the federal government’s adoption of zero trust principles and related regulatory expectations documented by the FFIEC, particularly as they impact financial institutions. Finally, we discuss a set of principles that directors can utilize to oversee the technology risk management function of their institutions.