People are never implicitly trusted. Every time a consumer attempts to access a useful resource, they must be authenticated and approved, irrespective of whether They are presently on the company network. Authenticated people are granted minimum-privilege entry only, and their permissions are revoked once their job is completed. Use https://ieeexplore.ieee.org/document/9941250