We must start to focus more on zero trust—verifying and protecting the identity of every user, device and service.