{"id":40884,"date":"2026-10-19T05:15:13","date_gmt":"2026-10-19T05:15:13","guid":{"rendered":"https:\/\/www.insentragroup.com\/nz\/insights\/uncategorized\/beyond-secure-access-why-zero-trust-must-become-a-workplace-architecture\/"},"modified":"2026-10-19T06:59:36","modified_gmt":"2026-10-19T06:59:36","slug":"beyond-secure-access-why-zero-trust-must-become-a-workplace-architecture","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/secure-workplace\/beyond-secure-access-why-zero-trust-must-become-a-workplace-architecture\/","title":{"rendered":"Beyond Secure Access: Why Zero Trust Must Become a Workplace Architecture"},"content":{"rendered":"\n

For years, Zero Trust has been one of the most discussed ideas in cybersecurity. Yet despite the investment organisations have made in Zero Trust programmes, I felt something was missing from the conversation. Most discussions still centred on whether a user, device or service should access a resource, while organisations were confronting a broader challenge: whether applications, AI assistants and autonomous agents should retrieve information, act on someone\u2019s behalf or complete business processes. Companies were just trying to secure access; now they are trying to secure the way people work. That observation led me to consider how Zero Trust should evolve from an access-focused security model into a workplace architecture that enables trusted work. <\/p>\n\n\n\n

The Workplace Has Changed <\/h2>\n\n\n\n

Many traditional security models placed substantial trust in managed devices, enterprise applications and secured networks. Work now spans secured and unsecured locations, devices, SaaS platforms, cloud services and digital workspaces. AI assistants and autonomous agents extend this further by retrieving information, supporting decisions and acting across business systems. Organisations must therefore govern who and what can act, which information they may use and what outcomes they may produce, while enabling safe use, reliable knowledge and governed automation without unnecessary complexity or friction.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

The Trust Decision Has Evolved <\/h2>\n\n\n\n

These additional components broaden how organisations must apply trust decisions. Established Zero Trust architectures already evaluate subjects, devices, assets, applications, services and resources through dynamic policy. Modern workplaces add urgency to determining whether people, applications, AI assistants and autonomous agents are authorised not only to access information, but also to perform specific actions on behalf of users or the organisation.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\n

<\/p>\n\n\n\n

<\/p>\n<\/div>\n\n\n\n

Access does not always grant authority to act. For example, an AI assistant might be authorised to retrieve customer information and draft an account update, while the final change requires human approval. Trust decisions must therefore consider the actor, purpose, information sensitivity, device or workload state, authority and potential consequences. This broader model forms the foundation of Zero Trust Workplace Architecture.<\/p>\n\n\n\n

Throughout my career in EUC and workplace transformation, I have helped organisations build secure, productive and resilient workforces across virtual desktops, endpoints, digital experience management, reporting and workplace strategies. The technologies have changed, but the objective has not: enable effective work while reducing risk. That experience shaped a simple belief: employees do not consume security controls; they consume workplace experiences. When controls are confusing or obstructive, productivity declines and users seek alternatives. <\/p>\n\n\n\n

The same principle applies to governance. If approved tools and processes are difficult to use, adoption falls and shadow IT becomes more attractive. This is not about trading security for convenience, it is about designing controls around how work happens so that security, productivity, experience, resilience and innovation reinforce one another. This is where I believe modern Zero Trust needs to evolve. <\/p>\n\n\n\n

Introducing Zero Trust Workplace Architecture <\/h2>\n\n\n\n

A Zero Trust Workplace Architecture extends established principles across the modern workplace, not as a replacement framework, but as an architectural model for coordinating signals, decisions and outcomes across identity, endpoints, data, browsers, applications, employee experience, AI, automation, governance and resilience. The aim is to support more coordinated and adaptive trust decisions for people and digital workers across the original domains and three expanded workplace domains: <\/p>\n\n\n\n