flowchart LR
u1(["Employee<br/><i>managed laptop</i>"])
u2(["Contractor<br/><i>unmanaged device</i>"])
u3["Workload<br/><i>service identity</i>"]
subgraph pep["Policy Enforcement"]
direction TB
px["Proxy / Gateway<br/><i>terminates every session</i>"]
end
subgraph pdp["Policy Decision"]
direction TB
eng{"Policy engine"}
sig1["Identity + MFA"]
sig2["Device posture"]
sig3["Risk + location"]
sig4["Resource sensitivity"]
sig1 --> eng
sig2 --> eng
sig3 --> eng
sig4 --> eng
end
subgraph res["Resources"]
direction TB
r1["Internal app"]
r2[("Database")]
r3["SaaS"]
end
u1 --> px
u2 --> px
u3 --> px
px <-->|"authorise this request"| eng
px -->|"allow · scoped · time-bound"| r1
px -->|"allow · read-only"| r2
px -->|"deny · posture fail"| r3
log[("Decision log<br/><i>every allow and deny</i>")]
eng --> log
Security View
Zero Trust Architecture Diagram
Access decided per request from identity, device and context rather than from network position, with the policy decision point drawn explicitly.
Network Security
Design