## Continuous Verification

Trust is ephemeral.

### Posture Checks
Before granting access, check the device health.
*   Is the OS patched?
*   Is EDR running?
*   Is Disk Encrypted?
If NO -> Quarantine the device until fixed.

### Session Times
*   **Old**: Login lasts 30 days.
*   **Zero Trust**: Login lasts 1 hour. Or 15 minutes for critical apps.
Re-verify constantly.