Zero trust is not a project with an end date but a mindset that must be embedded across people, processes and technology.