Course Outline · Beginner Friendly · 2026
This short course teaches you what Zero Trust means and why it is important in modern security. You will learn the simple idea behind Zero Trust, why it was created, and how it protects people, data, and systems. No technical experience needed.
| Item | Details |
|---|---|
| Level | Beginner |
| Duration | 2 weeks · 2–3 hours per week |
| Modules | 3 modules + 1 final project |
| Tools | Pen and paper (a computer is optional) |
| Certificate | Yes, after the final project |
This course contains 3 modules plus a final project.
Learn what Zero Trust means and why it is important for modern security.
Explain Zero Trust in simple words.
Learn the main rules that make Zero Trust work.
Name and explain the main principles of Zero Trust.
Learn how Zero Trust is used in banks, schools, and homes, and how to plan a simple Zero Trust approach.
Create a simple Zero Trust plan for a small project or family.
Choose a small system (for example, a family's devices, a school portal, or a small shop). Write a short plan that explains:
Present your plan to a friend, teacher, or family member. This becomes your portfolio piece.
After this course, you can continue to Introduction to Identity and Access Management, where you will learn how to manage users and control who can access what.
Zero Trust Fundamentals · Beginner Level · 2026
Welcome to the first module of Zero Trust Fundamentals. This is the start of a very important journey. By the end of this module, you will understand what Zero Trust means and why it matters for every person, family, and business.
Have you ever allowed a stranger into your house just because they were standing near the gate? Of course not. You would ask who they are and why they are there. You would not trust them just because they are close by.
Zero Trust means never trusting anyone or anything by default. It means checking every person, every device, and every request, every single time.
In the past, computers inside an office were trusted. If you were inside the building, you could use almost anything. But today, that is dangerous. Hackers can enter from anywhere. So we must not trust anyone automatically.
In this module, you will learn what Zero Trust is. You will learn why trusting everything is dangerous. You will see the old way and the new way. And you will learn why Zero Trust matters for everyone.
This module is written for complete beginners. You do not need to know any coding. Every new word is explained in very simple language. So relax, read slowly, and let us begin.
YOUR LEARNING JOURNEY IN MODULE 1
=================================
[ Start ]
|
V
What is Zero Trust?
|
V
Why "Trusting Everything" is Dangerous
|
V
The Old Way vs the New Way
|
V
Real-World Examples
|
V
Why Everyone Can Understand Zero Trust
|
V
[ You understand Zero Trust! ]
This module introduces Zero Trust. You will learn what it means, why it matters, and how it protects people, families, and businesses. Everything is explained in simple language with plenty of examples.
By the end of this module, you will be able to:
You will learn what Zero Trust is, why it matters, and how it protects everyone.
Chidi is a 12-year-old boy who lives in Lagos. He loves football. One Saturday, he went to watch a big match at the stadium.
At the gate, the security guard stopped every single person. Even people he knew. Even people who looked friendly. Even people who came every week.
"Why do you check everyone?" Chidi asked.
"Because I cannot trust anyone by looking," the guard said. "Anyone could hide something. I check tickets, bags, and IDs. Every time."
"Even people you know?" Chidi asked.
"Even them," the guard said. "People change. Bags change. So I check every time."
Chidi nodded. It made sense. Checking everyone made the stadium safer.
Later that day, Chidi told his father about the guard. His father smiled.
"That is exactly what Zero Trust means," his father said.
"Zero Trust?" Chidi asked.
"Yes. It means never trusting by default. Always checking. Always verifying. Every person. Every device. Every time."
Chidi thought about it. "So even if someone says they are a friend, we still check?"
"Yes," his father said. "Because bad people can pretend to be friends. So we check carefully every time."
From that day, Chidi understood. Zero Trust is like a careful guard who checks everyone. It is not about being rude. It is about being safe.
CHIDI AT THE STADIUM
====================
[ Guard at the gate ]
|
V
[ Checks every person ]
|
V
[ Checks every bag ]
|
V
[ Checks every ticket ]
|
V
[ Stadium stays safe ]
Zero Trust = Check everyone, every time.
Chidi learned that the stadium guard checks everyone, even people he knows. His father explained that this is Zero Trust. Never trust by default. Always verify. This story introduces the whole module.
In this section, you will go through 12 short lessons. Each lesson teaches one big idea. Each lesson ends with a mini summary. Read slowly. Think about the examples. Ask questions. That is how you learn.
Zero Trust means never trusting anyone or anything by default. It means checking every person, every device, and every request, every time.
In the old days, people trusted computers inside the office. But now hackers can enter from anywhere. Zero Trust protects against this.
Think of a stadium guard who checks everyone at the gate. They do not trust anyone by default. They verify every person. Zero Trust is the same for computers and systems.
When you log into your bank app, the bank checks your password and sends you an OTP. That is Zero Trust.
When a school portal asks for your exam number and password, that is Zero Trust.
When your family asks for the Wi-Fi password, that is Zero Trust.
When Nigerian banks send you an OTP before transferring money, that is Zero Trust.
ZERO TRUST
==========
[ Guard at the gate ]
|
V
[ Checks everyone ]
|
V
[ Checks every device ]
|
V
[ Checks every time ]
No one is trusted by default.
Zero Trust means never trusting anyone by default. Always verify. Every person, every device, every time.
Trusting everything means assuming everyone is safe. It is dangerous because bad people can hide.
If you trust everyone, one bad person can cause great harm. Zero Trust stops this.
Think of a school gate with no guard. Anyone can walk in. Now think of a gate with a careful guard. Only safe people enter.
If a bank trusted every login, a hacker could enter with a stolen password.
If a school trusted every student to see all results, cheating would happen.
If your Wi-Fi had no password, strangers would use your internet.
If a Nigerian bank trusted every transaction, fraud would be everywhere.
TRUSTING EVERYTHING
===================
[ No checks ] -> [ Anyone can enter ]
|
V
[ Problems happen ]
Zero Trust fixes this.
Trusting everything is dangerous. Zero Trust stops this by checking everyone and everything.
The old way of security meant trusting people inside the office and checking only outsiders.
Understanding the old way helps you see why we need Zero Trust.
Think of an old castle with one big wall. If you were inside, you were safe. But once an enemy entered, they could go anywhere.
An old bank branch with one entrance and no internal checks.
A school that trusts all students inside but checks visitors at the gate.
A house with one lock and no internal doors.
Old Nigerian banks trusted everyone inside the branch.
OLD WAY
=======
[ Strong wall outside ]
|
V
[ Inside: Trusted ]
[ Outside: Not trusted ]
If someone gets inside, they go anywhere.
The old way trusted people inside and checked only outsiders. This is no longer safe today.
The old way stopped working because people now work from many places. They use phones, laptops, and the internet.
The world changed. Old security could not keep up. That is why we need Zero Trust.
Think of a school with one gate. Now imagine students can enter from 100 different gates. Old security cannot protect all of them.
A bank employee works from home. Hackers can target them there.
Students log into portals from home, cafés, and phones.
Your family uses many devices connected to the internet.
Many Nigerians work remotely for local and international companies.
WHY THE OLD WAY STOPPED WORKING
===============================
[ Many devices ]
[ Many locations ]
[ Many threats ]
[ Many insiders ]
|
V
[ Old way cannot protect us ]
The old way stopped working because people work from many places and use many devices. That is why we need Zero Trust.
The new way is Zero Trust. It means checking every person, every device, and every request — every single time.
Zero Trust is safer for the modern world. It stops attacks even from inside.
Think of a bank with many checkpoints. Even if someone enters the gate, they must pass many checks inside. Zero Trust works the same way.
A modern bank checks your identity at every step: login, transfer, and logout.
A modern school portal asks for a code on your phone every time you log in.
Your family uses PINs, passwords, and 2FA on all devices.
Modern Nigerian banks use OTPs and 2FA for every transaction.
THE NEW WAY: ZERO TRUST
=======================
[ Verify user ]
|
V
[ Verify device ]
|
V
[ Verify request ]
|
V
[ Check again ]
|
V
[ Access allowed or denied ]
The new way is Zero Trust. It checks everything, every time.
The old way trusted insiders. The new way trusts no one by default.
Comparing them helps you see why Zero Trust is needed today.
Think of two schools. The old school trusts everyone inside. The new school checks everyone, even the head teacher. The new school is safer.
| Old Way | New Way (Zero Trust) |
|---|---|
| Trust inside the office | Trust no one by default |
| Check only outsiders | Check everyone |
| One big wall | Many small checks |
| If someone enters, they go anywhere | Every step is verified |
Old bank trusted staff. New bank checks staff and customers.
Old school trusted all students. New school checks exam access.
Old home had one lock. New home has alarms and cameras.
Nigerian banks have moved from old-style security to Zero Trust.
OLD vs NEW ========== Old: [ One wall ] -> [ Trusted inside ] New: [ Check 1 ] -> [ Check 2 ] -> [ Check 3 ] -> [ Access ]
The old way trusted insiders. The new way trusts no one by default. Zero Trust is safer.
"Never Trust, Always Verify" is the main rule of Zero Trust. It means checking every person, device, and request.
This rule protects you from attackers who hide as friends or insiders.
Think of a careful teacher. They check every student's work, even the best student's. That is verifying.
A bank checks who you are, what device you use, and what you want, before any transaction.
A school portal verifies the student before showing results.
Your family verifies any stranger at the gate.
Nigerian banks verify every customer's OTP before sending money.
NEVER TRUST, ALWAYS VERIFY
==========================
[ User asks for access ]
|
V
[ Verify who they are ]
|
V
[ Verify device and location ]
|
V
[ Verify request ]
|
V
[ Allow or deny ]
"Never Trust, Always Verify" is the main rule of Zero Trust. Check everything, every time.
Zero Trust is not only for computers. It is used in banks, hospitals, schools, and homes.
Seeing real examples helps you understand and remember Zero Trust.
Think of airport security. Everyone passes through checks. Even pilots. Even staff. That is Zero Trust.
Airport security checks passengers even if they have flown many times.
A school checks every visitor's ID.
Your family checks the gate before opening it.
Nigerian banks verify every transaction, even from trusted customers.
REAL-LIFE ZERO TRUST ==================== Banks: Check every transaction Hospitals: Check every staff Schools: Check every visitor Airports: Check every passenger Homes: Check every stranger
Zero Trust is used in banks, hospitals, schools, airports, and homes. It is everywhere.
Zero Trust matters because the modern world has many threats. Attackers can come from anywhere.
Zero Trust protects you, your family, and your business from modern attacks.
Think of an umbrella. It protects you from rain. Zero Trust is an umbrella for your digital life.
A bank with Zero Trust is safer than one without.
A school with Zero Trust protects student records better.
Your family with Zero Trust habits is safer online.
Nigerian banks use Zero Trust to stop fraud.
WHY ZERO TRUST MATTERS
======================
[ Zero Trust ] -> [ Attackers stopped ]
-> [ Data safe ]
-> [ Money safe ]
-> [ Trust kept ]
Zero Trust matters because it protects money, data, and trust in a modern world.
Zero Trust is part of daily life. Every time you verify something, you are using it.
Recognising Zero Trust in daily life helps you practice it everywhere.
Think of your morning. You check your phone PIN, your bank PIN, your email password. That is Zero Trust.
A student verifies the sender before clicking any link.
A student logs into the portal with a password and a code.
Your family uses a PIN to unlock the Wi-Fi router.
A Nigerian family checks the gate before opening it at night.
ZERO TRUST IN DAILY LIFE ======================== Phone PIN -> Verify Bank PIN -> Verify Email password -> Verify Gate check -> Verify Sender check -> Verify Zero Trust every day!
Zero Trust is part of daily life. Every check is a form of Zero Trust.
Zero Trust and the old way can work together. You keep the good parts of the old way and add Zero Trust.
You do not have to throw away everything. You build on what you have.
Think of a house. You keep the strong walls and add locks on every room. That is combining old and new.
A bank keeps its strong vault and adds checks for every transaction.
A school keeps its gate and adds ID checks for everyone.
Your family keeps the fence and adds security cameras.
Nigerian banks keep their branches and add modern Zero Trust checks.
OLD + NEW = STRONGEST
=====================
[ Old: Strong walls ]
+
[ New: Checks inside ]
=
[ Very strong security ]
Zero Trust works well with the old way. Keep the strong parts and add modern checks.
A Zero Trust thinker is someone who always checks before trusting.
This habit protects you, your family, and your friends.
Think of a careful traveller. They check the tickets, the bags, and the route before travelling. A Zero Trust thinker checks everything.
A student checks any strange message before clicking.
A student checks the sender before opening an email.
Your family checks the gate before opening.
A Nigerian verifies any caller before sharing details.
BECOMING A ZERO TRUST THINKER
=============================
[ Ask "is this safe?" ]
|
V
[ Verify before trusting ]
|
V
[ Check every device ]
|
V
[ Teach your family ]
|
V
[ Everyone safer! ]
A Zero Trust thinker always checks before trusting. Anyone can become one.
| Word | Simple Definition |
|---|---|
| Zero Trust | Never trusting anyone by default. Always verifying. |
| Trust | Believing that someone or something is safe. |
| Verify | To check if something is true or safe. |
| Old way | Trusting insiders and checking only outsiders. |
| New way | Zero Trust — checking everything, every time. |
| OTP | One-Time Password, used to verify you. |
| 2FA | Two-Factor Authentication, an extra check. |
| Access | Being able to use or see something. |
| Insider | Someone inside a system with special access. |
| Zero Trust Thinker | Someone who always checks before trusting. |
These words are the foundation of Zero Trust. Use them often so they become easy.
Do not assume anyone is safe. Always verify.
Check every user, device, and request.
Modern attacks can come from inside. Zero Trust protects against this.
Keep the strong parts of old security and add modern checks.
Students, parents, teachers, and businesses can all practice Zero Trust.
These five concepts are the heart of Module 1. Read them again before moving on.
USING ZERO TRUST
================
[ Who is this? ]
|
V
[ What device? ]
|
V
[ What do they want? ]
|
V
[ Verify ]
|
V
[ Give limited access ]
|
V
[ Check again ]
SPOTTING WHERE ZERO TRUST IS NEEDED
===================================
[ System ] -> [ Who accesses it? ]
-> [ Are they all trusted? ]
-> [ Is access checked? ]
-> [ If no, add Zero Trust ]
ZERO TRUST AT HOME
==================
[ Check gate ]
|
V
[ Use PINs ]
|
V
[ Turn on 2FA ]
|
V
[ Check messages ]
|
V
[ Teach family ]
Using Zero Trust, spotting where it is needed, and practicing at home all follow simple steps. Follow them, and you are safer.
A bank verifies every transaction, every time, even for trusted customers.
A hospital checks staff and visitors before entering wards.
A school checks every visitor's ID.
An airport checks every passenger, every time.
A government office verifies everyone, including senior officials.
Zero Trust is used in banks, hospitals, schools, airports, and government offices.
Nigerian banks verify every transaction with OTPs and 2FA.
Paystack and Flutterwave verify every payment.
Nigerian universities verify students before showing results.
NITDA and NCC verify every user on national systems.
Families check the gate before opening, especially at night.
Nigeria uses Zero Trust in banks, fintechs, schools, government, and families.
The guard checks every ticket, every time.
Only members with the password can enter.
Only you can open your diary with the lock code.
Games check who is logging in before starting.
Only friends who know the secret handshake can enter the club.
Zero Trust appears in stadium gates, clubhouses, diaries, video games, and secret handshakes.
| Situation | Zero Trust Idea |
|---|---|
| Locking your door | Verify before entering |
| Using a PIN | Verify identity |
| Wi-Fi password | Verify devices |
| Checking messages | Verify senders |
| Using 2FA | Double-check every login |
Even simple daily activities use Zero Trust ideas. Now you can see them everywhere.
Parents can teach Zero Trust at home through daily conversations and simple examples.
Zero Trust is powerful and used everywhere. It protects companies and families alike.
Zero Trust is full of surprises. The more you learn, the safer you become.
These ten points are the heart of Module 1. Read them again before moving on.
Avoiding these mistakes will help you practice Zero Trust better.
These ten practices will help you practice Zero Trust every day.
ZERO TRUST
==========
[ Guard at the gate ]
|
V
[ Checks everyone ]
|
V
[ Checks every device ]
|
V
[ Checks every time ]
No one is trusted by default.
OLD vs NEW ========== Old: [ One wall ] -> [ Trusted inside ] New: [ Check 1 ] -> [ Check 2 ] -> [ Check 3 ] -> [ Access ]
NEVER TRUST, ALWAYS VERIFY
==========================
[ User asks for access ]
|
V
[ Verify who they are ]
|
V
[ Verify device and location ]
|
V
[ Verify request ]
|
V
[ Allow or deny ]
REAL-LIFE ZERO TRUST ==================== Banks: Check every transaction Hospitals: Check every staff Schools: Check every visitor Airports: Check every passenger Homes: Check every stranger
ZERO TRUST IN DAILY LIFE ======================== Phone PIN -> Verify Bank PIN -> Verify Email password -> Verify Gate check -> Verify Sender check -> Verify Zero Trust every day!
BECOMING A ZERO TRUST THINKER
=============================
[ Ask "is this safe?" ]
|
V
[ Verify before trusting ]
|
V
[ Check every device ]
|
V
[ Teach your family ]
|
V
[ Everyone safer! ]
These diagrams help you see Zero Trust clearly. Draw them yourself to remember them better.
| Old Way | New Way (Zero Trust) |
|---|---|
| Trust inside the office | Trust no one by default |
| Check only outsiders | Check everyone |
| One big wall | Many small checks |
| If someone enters, they go anywhere | Every step is verified |
| Trusting | Verifying |
|---|---|
| Assuming someone is safe | Checking if someone is safe |
| No checks | Many checks |
| Risky | Safer |
| Example: No password | Example: Password + OTP |
| Place | Zero Trust Check |
|---|---|
| Bank | Verify every transaction |
| School | Verify every visitor |
| Airport | Verify every passenger |
| Hospital | Verify every staff |
| Home | Verify every stranger |
Comparing ideas side by side helps you remember the differences clearly.
| Lesson | Main Idea |
|---|---|
| Lesson 1 | Zero Trust means never trusting by default. |
| Lesson 2 | Trusting everything is dangerous. |
| Lesson 3 | The old way trusted insiders. |
| Lesson 4 | The old way stopped working because the world changed. |
| Lesson 5 | The new way is Zero Trust. |
| Lesson 6 | Old way trusted. New way verifies. |
| Lesson 7 | Never Trust, Always Verify. |
| Lesson 8 | Zero Trust is everywhere in real life. |
| Lesson 9 | Zero Trust matters for everyone. |
| Lesson 10 | Zero Trust is part of daily life. |
| Lesson 11 | Zero Trust works with the old way. |
| Lesson 12 | Anyone can become a Zero Trust thinker. |
Congratulations! You have completed Module 1. Let us review what you have learned.
You began by learning that Zero Trust means never trusting anyone by default. Always verify.
You discovered why trusting everything is dangerous.
You learned about the old way — trusting insiders and checking only outsiders.
You discovered why the old way stopped working in the modern world.
You explored the new way — Zero Trust.
You compared old and new and saw why Zero Trust is stronger.
You learned the main rule of Zero Trust: "Never Trust, Always Verify."
You discovered real-life examples in banks, schools, and airports.
You learned why Zero Trust matters.
You explored Zero Trust in daily life.
You learned how Zero Trust works with the old way.
Finally, you learned how to become a Zero Trust thinker.
MODULE 1 SUMMARY MAP
====================
[ Zero Trust ]
|
V
[ Why Trusting is Dangerous ] -> [ Old Way ]
|
V
[ Why Old Way Stopped Working ] -> [ New Way ]
|
V
[ Never Trust, Always Verify ]
|
V
[ Real-Life Examples ] -> [ Daily Life ]
|
V
[ Old + New Together ]
|
V
[ Zero Trust Thinker! ]
Well done! You now have a strong foundation. In Module 2, you will learn the main principles of Zero Trust.
Zero Trust means never trusting anyone by default. Always verify.
No. It means verifying first before trusting. You still work with people, but you check first.
Because bad people can hide and cause great harm.
The old way trusted insiders and checked only outsiders.
Because people now work from many places and use many devices. Attackers can come from anywhere.
"Never Trust, Always Verify."
A stadium guard who checks every ticket, every person, every time.
No. It works with the old way. Keep the strong parts and add checks.
Yes. PINs, passwords, 2FA, and checking messages are all Zero Trust.
You will learn the main principles of Zero Trust, like least privilege and continuous verification.
| Column A (Word) | Column B (Meaning) |
|---|---|
| 1. Zero Trust | A. To check if something is safe |
| 2. Verify | B. Trusting insiders and checking outsiders |
| 3. Old Way | C. Never trusting by default |
| 4. OTP | D. Extra login step |
| 5. 2FA | E. One-Time Password |
Answers: 1-C, 2-A, 3-B, 4-E, 5-D
| Column A (Place) | Column B (Check) |
|---|---|
| 1. Bank | A. Check every visitor |
| 2. School | B. Check every passenger |
| 3. Airport | C. Check every transaction |
| 4. Home | D. Check every stranger |
Answers: 1-C, 2-A, 3-B, 4-D
Matching helps you connect words to meanings quickly.
A man comes to your gate and says, "I am your father's friend. Let me in."
Questions:
A friend asks you for your school portal password to check their own result.
Questions:
An office trusts everyone inside the building and checks only visitors.
Questions:
These scenarios help you apply what you have learned to real situations.
Group size: 3–5 students
Time: 40 minutes
Materials: Paper, pencil
Instructions:
Goal: To practise designing Zero Trust in a group.
Time: 20 minutes
Materials: Notebook, pencil
Instructions:
Goal: To connect Zero Trust to your own life.
Time: 1–2 hours
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To practise designing Zero Trust at home.
Time: 1 week
Materials: Notebook, pencil
Instructions:
Goal: To see Zero Trust in the real world.
You have finished Module 1. Well done! Here is how to prepare for Module 2, which is all about Principles of Zero Trust.
TRANSITION TO MODULE 2
======================
[ Module 1: What is Zero Trust? ]
|
V
[ Module 2: Principles of Zero Trust ]
|
V
[ You will learn: least privilege, assume breach,
verify every user and device, and check continuously ]
See you in Module 2. Keep thinking like a Zero Trust thinker!
End of Module 1 — What is Zero Trust?
⬅ Back to Course Outline | Go to Module 2 ➡
Zero Trust Fundamentals · Beginner Level · 2026
Zero Trust Fundamentals · Beginner Level · 2026
Welcome to Module 2. In Module 1, you learned what Zero Trust means. You learned that it is about never trusting anyone by default. You learned that the old way trusted insiders, and the new way verifies everyone.
Now we go one step further. You will learn the main principles of Zero Trust. A principle is like a rule or a guide. When you follow good principles, your security stays strong.
Think of a football team. They follow principles like "pass the ball," "defend as a team," and "keep your shape." These principles help them win. Zero Trust has its own principles too.
In this module, you will learn six big principles. You will learn to never trust by default. You will learn about least privilege. You will learn to assume the network is not safe. You will learn to verify every user and device. You will learn to check continuously. And you will learn to plan for the worst.
This module is written for complete beginners. You do not need to know any coding. Every new word is explained in very simple language. Every principle comes with examples from real life, school, home, and Nigeria. So relax, read slowly, and let us begin.
YOUR LEARNING JOURNEY IN MODULE 2
=================================
[ Start ]
|
V
Never Trust, Always Verify
|
V
Least Privilege Access
|
V
Assume the Network is Not Safe
|
V
Verify Every User and Device
|
V
Check Continuously
|
V
Plan for the Worst
|
V
[ You know the principles of Zero Trust! ]
This module teaches you the six main principles of Zero Trust. Each principle helps you build stronger security from the start.
By the end of this module, you will be able to:
You will learn six principles of Zero Trust and how to apply them in daily life.
Amina is a 12-year-old girl who lives in Kano. Her mother owns a busy market stall where she sells spices and food items.
One Saturday, Amina's mother had to travel. She asked Amina to run the stall for the day.
Before leaving, her mother gave her some important rules:
Amina thought about these rules. They were like the principles of Zero Trust she had learned in school.
The day went well. A new helper came and asked to hold the money box. Amina politely said no. She gave the helper only the job of arranging the spices.
At noon, a customer tried to pay with fake money. Amina checked carefully and refused. The customer left quickly. Later, Amina counted the money and everything was correct.
When her mother returned, she was proud. "You followed the rules, Amina. You were careful with the money, the helpers, and the customers. That is how you keep a business safe."
Amina smiled. She had used all six principles of Zero Trust without knowing their formal names. That is what this module is all about.
AMINA'S MARKET RULES ==================== [ Never trust the money box ] [ Give only needed jobs ] [ Assume market is not safe ] [ Verify every customer's money ] [ Count money every hour ] [ Plan for problems ] All six principles of Zero Trust!
Amina ran her mother's market stall using six simple rules. Each rule matched a principle of Zero Trust. This story introduces the whole module.
In this section, you will go through 12 short lessons. Each lesson teaches one big idea. Each lesson ends with a mini summary. Read slowly. Think about the examples. Ask questions. That is how you learn.
A principle is a rule or guide that helps you make good decisions. It is a simple idea you follow again and again.
Principles help you stay consistent. When you follow good principles, you make fewer mistakes.
Think of a football coach. They have principles like "always pass the ball" and "keep your shape." A security designer has principles too.
A carpenter follows the principle "measure twice, cut once."
A student follows the principle "read the question twice before answering."
Your family follows the principle "lock the door before going out."
A trader follows the principle "count your money twice before closing."
PRINCIPLES ARE GUIDES
=====================
[ Principle ] -> [ Good decision ]
[ Principle ] -> [ Good decision ]
[ Principle ] -> [ Good decision ]
|
V
[ Consistent, safe results ]
A principle is a rule or guide that helps you make good decisions. Principles keep you consistent.
"Never Trust, Always Verify" is the main principle of Zero Trust. It means checking every person, every device, and every request, every single time.
If you trust by default, one bad person can cause great harm. Verifying stops this.
Think of a careful guard at a stadium. They check every ticket, even for people they know. That is verifying.
A bank verifies every transaction with your password and OTP.
A school portal verifies the student before showing results.
Your family verifies any stranger at the gate.
Nigerian banks verify every OTP before sending money.
NEVER TRUST, ALWAYS VERIFY
==========================
[ Request for access ]
|
V
[ Verify who ]
|
V
[ Verify device ]
|
V
[ Verify request ]
|
V
[ Allow or deny ]
"Never Trust, Always Verify" means checking everything, every time. It is the main principle of Zero Trust.
Least Privilege Access means giving each person only the access they need to do their job. Nothing more.
If someone has more access than they need, a mistake or hack can cause more damage.
Think of a school. The head teacher has keys to every room. A student only has access to their classroom. Students do not need keys to the staff room.
A bank teller can help customers. They cannot access the bank's main vault.
A student can check their own results. They cannot change anyone's scores.
Your younger brother can watch TV. He cannot change the family bank account.
A POS operator can collect payments. They cannot access the owner's full bank account.
LEAST PRIVILEGE =============== [ Head Teacher ] -> All rooms [ Teacher ] -> Classroom + Staff Room [ Student ] -> Classroom only [ Visitor ] -> Front gate only Each has only what they need.
Least Privilege Access means giving each person only the access they need. Nothing more.
Assume the network is not safe means treating every connection as if it could be dangerous. Do not trust the internet, Wi-Fi, or any network.
Attackers can enter from any network. If you assume the network is safe, you may be attacked.
Think of crossing a busy road. You do not assume cars will stop for you. You check before crossing. Networks are the same.
A bank tells staff not to use public Wi-Fi for work.
A school tells students not to share the portal password.
Your family uses a strong Wi-Fi password.
Nigerian banks require staff to use secure networks.
ASSUME THE NETWORK IS NOT SAFE ============================== [ Any network ] -> [ Could be dangerous ] Protect yourself: [ 2FA ] [ Strong passwords ] [ VPN ] [ Log out after use ]
Assume the network is not safe. Treat every connection as if it could be dangerous.
Verify every user and device means checking who is asking for access and from what device.
Attackers use stolen accounts and devices. Verifying both stops them.
Think of a hotel. The receptionist checks your ID and your room key. Both must match.
A bank alerts you if your account is accessed from a strange phone.
A school portal alerts students if someone logs in from another city.
Your family gets a notification when someone logs in from a new device.
Nigerian banks send alerts for logins from new devices.
VERIFY USER AND DEVICE
======================
[ Who is asking? ]
|
V
[ What device? ]
|
V
[ Where are they? ]
|
V
[ Allow or alert ]
Verify every user and device. Check who is asking and from where.
Check continuously means not just checking once. Check again and again, even after access is given.
Things change. A user might move to a strange location. A device might become infected. Continuous checks catch this.
Think of a school bus. The driver checks the mirrors again and again, not just at the start. Continuous checking is the same.
A bank logs you out after a few minutes of inactivity.
A school portal logs out students after some minutes of no activity.
Your phone locks itself after some minutes.
Nigerian bank apps log out after a few minutes of inactivity.
CHECK CONTINUOUSLY
==================
[ Grant access ]
|
V
[ Monitor activity ]
|
V
[ Something strange? ]
|
V
[ Alert or block ]
|
V
[ Re-check ]
Check continuously. Do not just check once. Keep checking after access is given.
Plan for the worst means assuming an attack might happen. Prepare in advance so you can recover quickly.
Attacks will happen. If you have planned, you can recover quickly.
Think of having a spare tyre in a car. You hope you never need it, but you are ready.
A bank has backup servers in another city.
A school keeps paper backups of important records.
Your family keeps a spare key (safely hidden).
Nigerian banks have backup systems and power generators.
PLAN FOR THE WORST
==================
[ Attack or failure ]
|
V
[ Backup ready ]
|
V
[ Recovery plan ]
|
V
[ System recovers ]
Plan for the worst. Prepare backups and recovery plans in case of attack or failure.
Using principles together means applying more than one rule at the same time. This makes your security even stronger.
Each principle protects you in a different way. Together, they build a much safer system.
Think of a football team. Passing, defending, and scoring all matter. Using them together wins matches.
A bank uses all six principles at once. That is why banks are hard to rob.
A school uses simple portals, limited access, and continuous checks.
Your home uses locks, alarms, and safe habits.
Nigerian banks use all six principles to protect customers.
ALL PRINCIPLES TOGETHER
=======================
[ Never Trust, Always Verify ]
[ Least Privilege Access ]
[ Assume Network Not Safe ]
[ Verify User and Device ]
[ Check Continuously ]
[ Plan for the Worst ]
|
V
[ Very strong security ]
Using principles together makes your security much stronger.
Principles in real life means seeing how these ideas are used in banks, hospitals, schools, and homes.
Seeing them in real life helps you remember and apply them.
Think of a hospital. Visitors have limited access. Doctors have their own access. Everyone is verified. That is Zero Trust.
An airport checks passengers even if they fly often.
A school checks every visitor's ID.
Your family checks the gate before opening.
Nigerian banks verify every transaction, even from trusted customers.
PRINCIPLES IN REAL LIFE ======================= Banks: Verify every transaction Hospitals: Verify every staff Schools: Verify every visitor Airports: Verify every passenger Homes: Verify every stranger
Zero Trust principles are used in banks, hospitals, schools, airports, and homes.
Principles in daily habits means using these ideas in small, everyday actions.
Small habits build strong security over time.
Think of brushing your teeth. It is small, but doing it daily protects you. Same for Zero Trust principles.
A student checks messages before clicking any link.
A student uses a different password for the school portal.
Your family sets a strong Wi-Fi password.
A Nigerian family covers their PIN at the ATM.
DAILY HABITS ============ Strong password -> Verify 2FA -> Verify again Check sender -> Verify Lock phone -> Protect Log out -> Protect Backups -> Plan
Small daily habits use Zero Trust principles. Together, they protect you.
Spotting missing principles means noticing when a design has forgotten one of the six principles.
When a principle is missing, the design is weaker. Spotting it helps you fix problems before they happen.
Think of a football team missing a goalkeeper. Anyone can score. That is a missing principle.
A website that trusts every login is missing "Never Trust."
A portal where students can see all results is missing "Least Privilege."
A Wi-Fi router without a password is missing "Assume Network Not Safe."
A bank without OTPs is missing "Verify Every User."
SPOTTING MISSING PRINCIPLES =========================== Trusted by default? -> Never Trust missing Everyone full access? -> Least Privilege missing Network assumed safe? -> Assume Not Safe missing Check only once? -> Check Continuously missing No backup? -> Plan for the Worst missing
Spotting missing principles helps you fix problems before they cause harm.
A Zero Trust champion is someone who uses the six principles every time they plan something.
This habit protects you, your family, and your projects. It prepares you for future work.
Think of a careful planner. They always consider safety, cost, and time. A Zero Trust champion always considers the six principles.
A student designs their class project with the six principles.
A student helps build a safer class portal.
Your family uses all six principles to protect their devices.
Nigerian cybersecurity professionals use the six principles daily.
BECOMING A CHAMPION
===================
[ Learn principles ]
|
V
[ Ask which is missing ]
|
V
[ Apply in daily life ]
|
V
[ Teach others ]
|
V
[ Review and improve ]
A Zero Trust champion uses the six principles every time they plan something. Anyone can become one.
| Word | Simple Definition |
|---|---|
| Principle | A rule or guide that helps you decide. |
| Never Trust, Always Verify | Check every person, device, and request. |
| Least Privilege Access | Give each person only what they need. |
| Assume Network Not Safe | Treat every network as if it could be dangerous. |
| Verify User | Check who is asking for access. |
| Verify Device | Check what device is asking for access. |
| Check Continuously | Keep checking even after access is granted. |
| Plan for the Worst | Prepare backups and recovery plans. |
| Backup | An extra copy of data. |
| Recovery Plan | Steps to take after a failure. |
| Champion | Someone who uses and teaches the principles. |
These words are the foundation of Zero Trust principles. Use them often so they become easy.
Rules help you make good decisions again and again.
Never trust by default. Always check.
Least privilege reduces the damage if something goes wrong.
Continuous checking catches new threats.
Plan for the worst so you can recover quickly.
These five concepts are the heart of Module 2. Read them again before moving on.
APPLYING THE SIX PRINCIPLES
===========================
[ Never Trust, Always Verify ]
|
V
[ Least Privilege ]
|
V
[ Assume Network Not Safe ]
|
V
[ Verify User and Device ]
|
V
[ Check Continuously ]
|
V
[ Plan for the Worst ]
|
V
[ Strong security! ]
SPOTTING MISSING PRINCIPLES =========================== [ Trusted default? ] -> Never Trust missing [ Full access? ] -> Least Privilege missing [ Safe network? ] -> Assume Not Safe missing [ One-time check? ] -> Check Continuously missing [ No backup? ] -> Plan for the Worst missing
FIXING A WEAK DESIGN
====================
[ Identify missing principle ]
|
V
[ Plan the fix ]
|
V
[ Make the change ]
|
V
[ Test ]
|
V
[ Review ]
Applying principles, spotting missing ones, and fixing weak designs all follow simple steps. Follow them, and your security stays strong.
A bank uses all six principles: verifies users, limits access, assumes networks are unsafe, and plans for the worst.
A hospital uses least privilege (doctors, nurses, visitors) and verifies every staff.
A school uses simple portals, limited access, and continuous checks.
An online shop verifies every transaction and plans for the worst.
A government office uses all six principles to protect national data.
The six principles are used in banks, hospitals, schools, shops, and government offices.
Nigerian banks use all six principles to protect customer money.
Paystack and Flutterwave verify every payment and check continuously.
Nigerian universities give different access to staff and students.
NITDA uses least privilege and continuous monitoring.
Families verify the gate, use PINs, and prepare for emergencies.
Nigeria uses the six principles in banks, fintechs, schools, government, and families.
Each player has a role (least privilege). The coach checks every player before the match (verify).
Each compartment holds a different food (least privilege). You check food before eating (verify).
Each item has a place (least privilege). You close the zip (assume not safe).
If one card falls, the house falls. Backups prevent this.
Games verify your login every time (verify). They save progress (plan for worst).
The principles appear in football teams, lunchboxes, pencil cases, card houses, and video games.
| Situation | Principle |
|---|---|
| Locking your door | Assume Not Safe |
| Using a PIN | Verify |
| Simple Wi-Fi password | Least Privilege |
| Checking messages | Never Trust |
| Logging out | Continuous Check |
Even simple daily actions use the six principles. Now you can see them everywhere.
Parents can teach the principles at home through daily conversations and simple examples.
The six principles are powerful and used everywhere.
The six principles are full of surprises. The more you learn, the more useful they become.
These ten points are the heart of Module 2. Read them again before moving on.
Avoiding these mistakes will make your security stronger than most.
These ten practices will help you build strong, safe systems.
SIX PRINCIPLES OF ZERO TRUST ============================ [ Never Trust, Always Verify ] [ Least Privilege Access ] [ Assume Network Not Safe ] [ Verify Every User and Device ] [ Check Continuously ] [ Plan for the Worst ]
NEVER TRUST, ALWAYS VERIFY
==========================
[ Request ]
|
V
[ Verify who ]
|
V
[ Verify device ]
|
V
[ Verify request ]
|
V
[ Allow or deny ]
LEAST PRIVILEGE =============== [ Head Teacher ] -> All rooms [ Teacher ] -> Classroom + Staff Room [ Student ] -> Classroom only [ Visitor ] -> Front gate only
ASSUME NETWORK NOT SAFE ======================= [ Any network ] -> [ Could be dangerous ] Protect yourself: [ 2FA ] [ Strong passwords ] [ VPN ] [ Log out after use ]
CHECK CONTINUOUSLY
==================
[ Grant access ]
|
V
[ Monitor activity ]
|
V
[ Alert or block ]
|
V
[ Re-check ]
BECOMING A CHAMPION
===================
[ Learn principles ]
|
V
[ Spot missing ones ]
|
V
[ Apply daily ]
|
V
[ Teach others ]
|
V
[ Review and improve ]
These diagrams help you see the six principles clearly. Draw them yourself to remember them better.
| Principle | Meaning |
|---|---|
| Never Trust, Always Verify | Check everything, every time. |
| Least Privilege Access | Give only what is needed. |
| Assume Network Not Safe | Treat every network as dangerous. |
| Verify User and Device | Check who and what is asking. |
| Check Continuously | Keep checking after access. |
| Plan for the Worst | Prepare backups and recovery. |
| Trusting | Verifying |
|---|---|
| Assuming someone is safe | Checking if someone is safe |
| No checks | Many checks |
| Risky | Safer |
| Example: No password | Example: Password + OTP |
| One-Time Check | Continuous Check |
|---|---|
| Check only at login | Keep checking after login |
| Misses new threats | Catches new threats |
| Weaker | Stronger |
| Example: password only | Example: password + OTP + monitoring |
Comparing ideas side by side helps you remember the differences clearly.
| Lesson | Main Idea |
|---|---|
| Lesson 1 | A principle is a rule or guide. |
| Lesson 2 | Never Trust, Always Verify is the main rule. |
| Lesson 3 | Least Privilege gives only what is needed. |
| Lesson 4 | Assume the network is not safe. |
| Lesson 5 | Verify every user and device. |
| Lesson 6 | Check continuously. |
| Lesson 7 | Plan for the worst. |
| Lesson 8 | Using principles together is strongest. |
| Lesson 9 | Principles appear in banks, hospitals, schools. |
| Lesson 10 | Small daily habits use the principles. |
| Lesson 11 | Spotting missing principles prevents harm. |
| Lesson 12 | Anyone can become a Zero Trust champion. |
Congratulations! You have completed Module 2. Let us review what you have learned.
You began by learning that a principle is a rule or guide.
You learned the main rule of Zero Trust: "Never Trust, Always Verify."
You discovered Least Privilege Access — give each person only what they need.
You explored Assume the Network is Not Safe — treat every connection as if it could be dangerous.
You learned to verify every user and device.
You discovered the principle of Check Continuously — keep checking after access is granted.
You explored Plan for the Worst — prepare backups and recovery plans.
You learned how to use principles together for stronger security.
You found principles in real life — banks, hospitals, schools, homes.
You saw how daily habits use the principles.
You learned to spot missing principles in weak designs.
Finally, you learned how to become a Zero Trust champion.
MODULE 2 SUMMARY MAP
====================
[ Never Trust, Always Verify ]
|
V
[ Least Privilege ] -> [ Assume Network Not Safe ]
|
V
[ Verify User and Device ] -> [ Check Continuously ]
|
V
[ Plan for the Worst ]
|
V
[ Use Together ] -> [ Spot Missing ] -> [ Champion! ]
Well done! You now understand the six principles of Zero Trust. In Module 3, you will learn how Zero Trust is used in real life and how to plan your own Zero Trust approach.
A principle is a rule or guide that helps you make good decisions.
It means checking every person, device, and request, every time.
Give each person only the access they need. Nothing more.
Because attackers can enter from any network. Treat every connection as dangerous.
Because attackers use stolen accounts and devices. Verifying both stops them.
Things change. New threats appear. Continuous checks catch them.
Prepare backups and recovery plans in case of attack or failure.
Yes. Using many together makes your security stronger.
Look at the design and ask if it trusts by default, gives too much access, has only one-time checks, or has no backup.
You will learn how Zero Trust is used in real life and how to plan your own Zero Trust approach.
| Column A (Principle) | Column B (Meaning) |
|---|---|
| 1. Never Trust, Always Verify | A. Give only what is needed |
| 2. Least Privilege | B. Keep checking after access |
| 3. Assume Network Not Safe | C. Check everything, every time |
| 4. Check Continuously | D. Prepare for attack or failure |
| 5. Plan for the Worst | E. Treat every network as dangerous |
Answers: 1-C, 2-A, 3-E, 4-B, 5-D
| Column A (Situation) | Column B (Principle) |
|---|---|
| 1. Logging out on shared devices | A. Least Privilege |
| 2. Student can only see own results | B. Assume Network Not Safe |
| 3. Using 2FA | C. Verify |
| 4. Having a backup plan | D. Plan for the Worst |
Answers: 1-B, 2-A, 3-C, 4-D
Matching helps you connect principles to meanings quickly.
A school is building a new portal. Any student can see any result. Anyone can change anything.
Questions:
Your family's Wi-Fi router has no password. Anyone can use it.
Questions:
An online shop verifies users only once, then never again. It also has no backup.
Questions:
These scenarios help you apply what you have learned to real situations.
Group size: 3–5 students
Time: 40 minutes
Materials: Paper, pencil
Instructions:
Goal: To practise applying all six principles together.
Time: 20 minutes
Materials: Notebook, pencil
Instructions:
Goal: To connect principles to your own life.
Time: 1–2 hours
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To practise using all six principles in one design.
Time: 1 week
Materials: Notebook, pencil
Instructions:
Goal: To practise spotting missing principles in real life.
You have finished Module 2. Well done! Here is how to prepare for Module 3, which is all about Zero Trust in Real Life and Planning.
TRANSITION TO MODULE 3
======================
[ Module 2: Principles of Zero Trust ]
|
V
[ Module 3: Zero Trust in Real Life and Planning ]
|
V
[ You will learn: Zero Trust in banks, schools, homes,
and how to build your own simple Zero Trust plan ]
See you in Module 3. Keep thinking like a Zero Trust champion!
End of Module 2 — Principles of Zero Trust
⬅ Back to Course Outline | Go to Module 3 ➡
Zero Trust Fundamentals · Beginner Level · 2026
Zero Trust Fundamentals · Beginner Level · 2026
Welcome to Module 3 — the final module of Zero Trust Fundamentals. You have come a long way. In Module 1, you learned what Zero Trust means. In Module 2, you learned the six principles of Zero Trust.
Now we come to the last piece of the puzzle. You will learn how Zero Trust is used in real life. You will see how banks, schools, hospitals, and families use it every day. You will also learn how to build your own simple Zero Trust plan.
Think of a builder. They know the materials and the rules. Now they must build a real house. In this module, you will see Zero Trust built into real life.
You will learn how Zero Trust works in banks, schools, and homes. You will see how Nigerian banks protect money. You will see how schools protect records. You will see how families protect their devices. And you will build your own plan.
This module is written for complete beginners. You do not need to know any coding. Every new word is explained in very simple language. Every idea comes with examples from real life, school, home, and Nigeria. So relax, read slowly, and let us begin.
YOUR LEARNING JOURNEY IN MODULE 3
=================================
[ Start ]
|
V
Zero Trust in Banks
|
V
Zero Trust in Schools
|
V
Zero Trust in Homes
|
V
Building a Zero Trust Plan
|
V
Common Mistakes and Best Practices
|
V
[ You are ready to plan Zero Trust! ]
This module teaches you how Zero Trust is used in real life. You will learn about banks, schools, and homes, and how to build your own Zero Trust plan.
By the end of this module, you will be able to:
You will learn how Zero Trust works in real life and how to build your own plan.
Chidi is a 13-year-old boy who lives in Port Harcourt. He has a small business delivering food from restaurants to customers. He uses his bicycle and a mobile app his uncle built for him.
One day, Chidi's uncle said, "Chidi, your business is growing. We need to make it safer. Let me show you how Zero Trust works in business."
Chidi was curious. "How, Uncle?"
His uncle explained. "First, every customer must verify their identity with a code before you deliver. That is 'Never Trust, Always Verify.'"
"Second, each rider can only see the orders they need to deliver. That is 'Least Privilege.'"
"Third, we must assume the mobile network is not safe. So we send the delivery code by SMS as well. That is 'Assume the Network is Not Safe.'"
"Fourth, we verify both the customer and the rider before each delivery. That is 'Verify Every User and Device.'"
"Fifth, we check every delivery in real time on a map. That is 'Check Continuously.'"
"Sixth, we keep paper records in case the phone fails. That is 'Plan for the Worst.'"
Chidi was amazed. All six principles were being used in his small business.
"That is Zero Trust, Chidi," his uncle said. "It works for big banks and small businesses too."
Chidi smiled. He had learned something important. Zero Trust is not just for big companies. It is for everyone — even a boy with a bicycle and a dream.
CHIDI'S DELIVERY BUSINESS ========================= [ Never Trust, Always Verify ] -> Verify customer code [ Least Privilege ] -> Rider sees only own orders [ Assume Network Not Safe ] -> Send code by SMS too [ Verify User and Device ] -> Check customer + rider [ Check Continuously ] -> Track every delivery [ Plan for the Worst ] -> Keep paper records
Chidi learned that Zero Trust works in real life — even in a small delivery business. His uncle explained how the six principles protect his business. This story introduces the whole module.
In this section, you will go through 12 short lessons. Each lesson teaches one big idea. Each lesson ends with a mini summary. Read slowly. Think about the examples. Ask questions. That is how you learn.
Zero Trust in banks means verifying every customer, device, and transaction before allowing anything.
Banks hold people's money. If security fails, customers lose everything.
Think of a bank. Every customer must show ID. Every transaction must be confirmed. Every login must be checked. That is Zero Trust.
A bank sends you an OTP every time you send money.
A school's bank account requires two signatures for large payments.
Your family's bank app requires a PIN and fingerprint.
Nigerian banks send OTPs for every transfer and verify every login device.
ZERO TRUST IN BANKS
===================
[ Customer ] -> [ Verify identity ]
|
V
[ Verify device ]
|
V
[ Verify transaction ]
|
V
[ Allow or deny ]
Banks use Zero Trust by verifying every customer, device, and transaction.
Zero Trust in schools means verifying every student, teacher, and visitor before allowing access.
Schools hold student records, exam papers, and personal information. Zero Trust protects them.
Think of a school gate. Every visitor must sign in. Every student must show an ID. Every teacher must use a password. That is Zero Trust.
A school portal sends a code to your email before you can log in.
A school verifies every visitor's ID before allowing entry.
Your family checks any stranger at the gate before opening.
Nigerian universities use exam numbers and passwords for result portals.
ZERO TRUST IN SCHOOLS
=====================
[ Student ] -> [ Verify ID ]
|
V
[ Verify password ]
|
V
[ Verify device ]
|
V
[ Allow or deny ]
Schools use Zero Trust by verifying every student, teacher, and visitor.
Zero Trust in homes means verifying everyone and everything that tries to enter your home or your devices.
Families have money, private messages, and personal data. Zero Trust protects them.
Think of your home gate. You check who is outside before opening. You use PINs on phones. You use passwords on Wi-Fi. That is Zero Trust.
Your family checks the gate before opening for a stranger.
A student checks any message before clicking a link.
Your family uses a strong Wi-Fi password and checks new devices.
A Nigerian family covers their PIN at the ATM.
ZERO TRUST IN HOMES =================== [ Stranger at gate ] -> [ Check before opening ] [ New device ] -> [ Verify before connecting ] [ Message ] -> [ Check before clicking ] [ Account ] -> [ Use PIN + 2FA ]
Families use Zero Trust by verifying everyone and everything that tries to enter their home or devices.
Zero Trust in businesses means verifying every employee, customer, device, and transaction before allowing anything.
Businesses have money, data, and reputation. Zero Trust protects all three.
Think of a shop. Every customer must pay before taking goods. Every worker has a specific job. Every transaction is recorded. That is Zero Trust.
A small Nigerian shop uses a POS machine that verifies every card.
A school canteen verifies every student's lunch ticket.
Your family verifies payments before transferring money.
Nigerian fintechs verify every payment and check continuously.
ZERO TRUST IN BUSINESSES ======================== [ Employee ] -> Verify login [ Customer ] -> Verify payment [ Device ] -> Verify identity [ Network ] -> Assume not safe [ Data ] -> Backup regularly
Businesses use Zero Trust by verifying every employee, customer, device, and transaction.
A Zero Trust plan is a written set of steps that shows how you will apply the six principles in a project.
A plan helps you stay organised. You can review and improve it.
Think of a shopping list. Once it is on paper, you do not forget items. A Zero Trust plan is like that for security.
A bank writes a Zero Trust plan before launching a new app.
A school writes a Zero Trust plan before launching a portal.
Your family writes a simple plan for online safety.
Nigerian banks document their Zero Trust plans formally.
BUILDING A ZERO TRUST PLAN
==========================
[ Describe what to protect ]
|
V
[ List users ]
|
V
[ List threats ]
|
V
[ Apply six principles ]
|
V
[ Plan recovery ]
|
V
[ Review and update ]
A Zero Trust plan shows how you will apply the six principles in a project.
Applying the six principles means using all of them together in your Zero Trust plan.
Using all six principles makes your security much stronger.
Think of a football team. Passing, defending, and scoring all matter. Using them together wins matches.
A bank applies all six principles when protecting customers.
A school applies all six principles for its portal.
Your family applies all six principles for their devices.
Nigerian banks apply all six principles every day.
APPLYING THE SIX PRINCIPLES
===========================
[ Never Trust ]
|
V
[ Least Privilege ]
|
V
[ Assume Not Safe ]
|
V
[ Verify User + Device ]
|
V
[ Check Continuously ]
|
V
[ Plan for the Worst ]
|
V
[ Strong security! ]
Applying all six principles together makes your Zero Trust plan strong.
Choosing where to start means deciding which part of your security to improve first.
You cannot fix everything at once. Start with the most important.
Think of cleaning a house. You start with the kitchen, then the bedrooms, then the compound.
A bank starts with login security before adding other features.
A school starts with portal passwords before adding new features.
Your family starts with Wi-Fi and phone PINs.
Nigerian banks start with customer login security.
WHERE TO START
==============
[ Most valuable ]
|
V
[ Most exposed ]
|
V
[ Easiest fix ]
|
V
[ People ]
|
V
[ Then the rest ]
Choose where to start by focusing on the most valuable and most exposed parts first.
Testing your Zero Trust plan means checking if your plan works before using it.
Testing finds problems before they become real. It saves time and money.
Think of rehearsing a play. You practice before the real show. Testing is the rehearsal for a plan.
A bank tests a new security feature with a small group before launching.
A school tests the portal with a few students first.
Your family tests a new Wi-Fi password on one device before using it everywhere.
Nigerian banks test new features in a safe environment first.
TESTING YOUR PLAN
=================
[ Walk through ]
|
V
[ Ask a friend ]
|
V
[ Try to break it ]
|
V
[ Fix problems ]
|
V
[ Ready to use ]
Testing your Zero Trust plan means checking if your plan works before using it.
Keeping your Zero Trust plan alive means updating it regularly as things change.
Threats change. Systems change. Your plan must change too.
Think of a garden. You do not just plant it. You water it, weed it, and protect it. Plans are the same.
A bank reviews its Zero Trust plan every quarter.
A school updates its portal security every term.
Your family changes Wi-Fi passwords every year.
Nigerian banks review their plans constantly to stop new attacks.
KEEPING THE PLAN ALIVE
======================
[ Review regularly ]
|
V
[ Update access ]
|
V
[ Train users ]
|
V
[ Test backups ]
|
V
[ Learn from incidents ]
|
V
[ Plan stays strong ]
Keeping your Zero Trust plan alive means updating it regularly as things change.
Teaching Zero Trust to others means sharing what you know so everyone stays safe.
When everyone knows Zero Trust, the whole community becomes stronger.
Think of a class. If everyone knows the rules, no one breaks them.
A bank trains all staff about Zero Trust.
A teacher explains Zero Trust to the class.
A parent teaches their child about safe browsing.
Nigerian banks and schools run regular Zero Trust training.
TEACHING OTHERS
===============
[ You learn ]
|
V
[ You teach family ]
|
V
[ They teach friends ]
|
V
[ Community stays safe ]
Teaching Zero Trust to others makes the whole community stronger.
Common mistakes are errors people make when applying Zero Trust.
Knowing the mistakes helps you avoid them.
Think of baking a cake. If you forget sugar, it tastes bad. Common mistakes in Zero Trust are like that.
A bank trusts an employee too much and loses money.
A school trusts all students and someone changes scores.
A family does not change Wi-Fi password for years.
A Nigerian business forgets to plan for power outages.
COMMON MISTAKES =============== [ Trust by default ] [ Full access for all ] [ Assume network safe ] [ Verify only once ] [ Ignore devices ] [ No backup ] [ No updates ] [ No training ]
Common mistakes include trusting by default, giving too much access, and not updating plans.
Best practices are the best ways to apply Zero Trust.
Best practices keep your security strong and consistent.
Think of a football team. Best practices are like good training habits. They make the team strong.
A bank follows all best practices every day.
A school reviews its portal every term.
Your family follows safe habits daily.
Nigerian banks follow best practices strictly.
BEST PRACTICES ============== [ Never Trust ] [ Least Privilege ] [ Assume Not Safe ] [ Verify User + Device ] [ Check Continuously ] [ Plan for Worst ] [ Update Plan ] [ Train Users ] [ Review ] [ Teach ]
Best practices keep Zero Trust strong and consistent. Follow them every day.
| Word | Simple Definition |
|---|---|
| Zero Trust Plan | A written plan showing how to apply the six principles. |
| Verify | To check if something is true or safe. |
| Least Privilege | Give only what is needed. |
| Continuous Check | Checking again and again. |
| Backup | An extra copy of data. |
| Recovery Plan | Steps to take after a failure. |
| Update | To change or improve something. |
| Training | Teaching people new skills. |
| Best Practice | A good way of doing something. |
| Common Mistake | An error that many people make. |
These words are the foundation of Zero Trust planning. Use them often so they become easy.
Banks, schools, homes, and businesses all use Zero Trust.
A written plan keeps you organised and prepared.
Protect the most valuable and exposed parts first.
Test your plan, then update it regularly.
When everyone knows Zero Trust, the whole community is safer.
These five concepts are the heart of Module 3. Read them again before finishing the course.
BUILDING A ZERO TRUST PLAN
==========================
[ Describe what to protect ]
|
V
[ List users ]
|
V
[ List threats ]
|
V
[ Apply six principles ]
|
V
[ Plan recovery ]
|
V
[ Review and update ]
TESTING A PLAN
==============
[ Walk through ]
|
V
[ Ask a friend ]
|
V
[ Try to break ]
|
V
[ Fix problems ]
|
V
[ Ready ]
KEEPING A PLAN ALIVE
====================
[ Review regularly ]
|
V
[ Update access ]
|
V
[ Train users ]
|
V
[ Test backups ]
|
V
[ Learn from incidents ]
|
V
[ Plan stays strong ]
Building, testing, and keeping a Zero Trust plan alive all follow simple steps. Follow them, and your plan stays strong.
A bank uses a Zero Trust plan to protect customer money every day.
A hospital protects patient records using Zero Trust.
A school uses Zero Trust to protect student records.
An online shop verifies every payment and checks continuously.
A government office uses Zero Trust to protect national data.
Zero Trust is used in banks, hospitals, schools, shops, and government offices.
Nigerian banks use Zero Trust to protect customer money.
Paystack and Flutterwave verify every payment and check continuously.
Nigerian universities verify students before showing results.
NITDA uses Zero Trust to protect national systems.
Families verify the gate, use PINs, and prepare for emergencies.
Nigeria uses Zero Trust in banks, fintechs, schools, government, and families.
Every player is verified before entering the pitch. Roles are limited. Progress is tracked.
Each item has its place. Food is checked before eating.
Each item is verified. No one shares without permission.
If one card falls, the house falls. Backups prevent this.
Games verify your login every time and save progress.
The principles appear in football teams, lunchboxes, pencil cases, card houses, and video games.
| Situation | Zero Trust Practice |
|---|---|
| Checking the gate | Verify before opening |
| Using a PIN | Verify identity |
| Wi-Fi password | Assume not safe |
| Checking messages | Never trust |
| Logging out | Check continuously |
Even simple daily activities use Zero Trust. Now you can see it everywhere.
Parents can teach Zero Trust and planning at home through daily conversations and simple examples.
Zero Trust is powerful and used everywhere.
Zero Trust is full of surprises. The more you learn, the safer you become.
These ten points are the heart of Module 3. Read them again before finishing the course.
Avoiding these mistakes will make your Zero Trust stronger than most.
These ten practices will help you build a strong Zero Trust plan.
ZERO TRUST IN BANKS
===================
[ Customer ] -> [ Verify identity ]
|
V
[ Verify device ]
|
V
[ Verify transaction ]
|
V
[ Allow or deny ]
ZERO TRUST IN SCHOOLS
=====================
[ Student ] -> [ Verify ID ]
|
V
[ Verify password ]
|
V
[ Verify device ]
|
V
[ Allow or deny ]
ZERO TRUST IN HOMES =================== [ Stranger at gate ] -> [ Check before opening ] [ New device ] -> [ Verify before connecting ] [ Message ] -> [ Check before clicking ] [ Account ] -> [ Use PIN + 2FA ]
BUILDING A ZERO TRUST PLAN
==========================
[ Describe what to protect ]
|
V
[ List users ]
|
V
[ List threats ]
|
V
[ Apply six principles ]
|
V
[ Plan recovery ]
|
V
[ Review and update ]
TESTING YOUR PLAN
=================
[ Walk through ]
|
V
[ Ask a friend ]
|
V
[ Try to break it ]
|
V
[ Fix problems ]
|
V
[ Ready ]
KEEPING THE PLAN ALIVE
======================
[ Review ]
|
V
[ Update ]
|
V
[ Train ]
|
V
[ Test backups ]
|
V
[ Learn from incidents ]
|
V
[ Plan stays strong ]
These diagrams help you see Zero Trust in real life. Draw them yourself to remember them better.
| Place | How Zero Trust Works |
|---|---|
| Bank | Verify every transaction |
| School | Verify every visitor and student |
| Home | Verify every stranger and device |
| Business | Verify every customer and employee |
| Before | After |
|---|---|
| Trust by default | Verify every time |
| Unlimited access | Least privilege |
| One-time check | Continuous checks |
| No backup | Backup plan ready |
| Common Mistakes | Best Practices |
|---|---|
| Trust by default | Never trust |
| Full access for all | Least privilege |
| Assume network safe | Assume not safe |
| One-time check | Continuous check |
| No backup | Plan for the worst |
Comparing ideas side by side helps you remember the differences clearly.
| Lesson | Main Idea |
|---|---|
| Lesson 1 | Banks verify every customer, device, and transaction. |
| Lesson 2 | Schools verify every student, teacher, and visitor. |
| Lesson 3 | Homes verify every stranger and device. |
| Lesson 4 | Businesses verify every customer and employee. |
| Lesson 5 | A Zero Trust plan shows how to apply the six principles. |
| Lesson 6 | Applying all six principles is strongest. |
| Lesson 7 | Start with what matters most. |
| Lesson 8 | Test your plan before using it. |
| Lesson 9 | Keep your plan alive with regular reviews. |
| Lesson 10 | Teaching others makes everyone safer. |
| Lesson 11 | Common mistakes weaken your security. |
| Lesson 12 | Best practices keep your plan strong. |
Congratulations! You have completed Module 3. Let us review what you have learned.
You began by learning how Zero Trust works in banks.
You discovered how Zero Trust works in schools.
You learned how Zero Trust works in homes.
You explored Zero Trust in businesses.
You learned how to build a Zero Trust plan.
You discovered how to apply the six principles in your plan.
You learned how to choose where to start.
You explored how to test your plan.
You learned how to keep your plan alive with reviews.
You discovered how to teach others about Zero Trust.
You learned the common mistakes to avoid.
Finally, you learned the best practices for Zero Trust.
MODULE 3 SUMMARY MAP
====================
[ Zero Trust in Banks ]
|
V
[ Zero Trust in Schools ] -> [ Zero Trust in Homes ]
|
V
[ Zero Trust in Businesses ] -> [ Build a Plan ]
|
V
[ Apply Six Principles ] -> [ Test Plan ]
|
V
[ Keep Plan Alive ] -> [ Teach Others ]
|
V
[ Avoid Mistakes ] -> [ Best Practices ] -> [ Ready to Apply! ]
Well done! You have completed the entire Zero Trust Fundamentals course. You now understand Zero Trust and how to plan it for real systems.
They verify every customer, device, and transaction before allowing anything.
They verify every student, teacher, and visitor before allowing access.
They verify every stranger, device, and message before trusting.
They verify every employee, customer, device, and transaction.
A written plan showing how to apply the six principles in a project.
Describe what to protect, list users and threats, apply the six principles, plan for recovery, and review.
Start with the most valuable and most exposed parts first.
Walk through it, ask a friend to review, try to break it, and fix problems.
Review it every few months, update access, and learn from incidents.
Trusting by default. Always verify.
| Column A (Place) | Column B (Check) |
|---|---|
| 1. Bank | A. Verify every visitor |
| 2. School | B. Verify every customer |
| 3. Home | C. Verify every transaction |
| 4. Business | D. Verify every stranger and device |
Answers: 1-C, 2-A, 3-D, 4-B
| Column A (Step) | Column B (Purpose) |
|---|---|
| 1. Describe what to protect | A. Find problems |
| 2. List users and threats | B. Know your goal |
| 3. Apply principles | C. Know who and what |
| 4. Test the plan | D. Make it strong |
Answers: 1-B, 2-C, 3-D, 4-A
Matching helps you connect places and steps to their purposes.
A school is launching a new portal next week. They have not planned Zero Trust.
Questions:
Your family set up Wi-Fi but did not plan for Zero Trust.
Questions:
A trader is opening an online shop. She has not planned security or backups.
Questions:
These scenarios help you apply what you have learned to real situations.
Group size: 3–5 students
Time: 40 minutes
Materials: Paper, pencil
Instructions:
Goal: To practise building a Zero Trust plan as a team.
Time: 20 minutes
Materials: Notebook, pencil
Instructions:
Goal: To plan Zero Trust for your own life.
Time: 1–2 hours
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To practise building a full Zero Trust plan.
Time: 1 week
Materials: Notebook, pencil
Instructions:
Goal: To see Zero Trust planning in real systems.
You have completed the entire Zero Trust Fundamentals course. Well done! Here is what to do next.
YOUR COURSE JOURNEY
===================
[ Module 1: What is Zero Trust? ]
|
V
[ Module 2: Principles of Zero Trust ]
|
V
[ Module 3: Zero Trust in Real Life and Planning ]
|
V
[ You are now ready to apply Zero Trust! ] 🎉
Congratulations on completing the course. Keep thinking like a Zero Trust champion, keep learning, and protect yourself and your family.
End of Module 3 — Zero Trust in Real Life and Planning
End of the Zero Trust Fundamentals Course
⬅ Back to Course Outline | ⬅ Back to Module 2
Zero Trust Fundamentals · Beginner Level · 2026