{"id":"https://openalex.org/W7224652401","doi":"https://doi.org/10.5281/zenodo.23766568","title":"Zero Trust Architecture and Organisational Cybersecurity Resilience: Critical Conceptual Review","display_name":"Zero Trust Architecture and Organisational Cybersecurity Resilience: Critical Conceptual Review","publication_year":2026,"publication_date":"2026-10-29","ids":{"openalex":"https://openalex.org/W7224652401","doi":"https://doi.org/10.5281/zenodo.23766568"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23766568","doi":"https://doi.org/10.5281/zenodo.23766568","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23766568","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23766568","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160123844","display_name":"KATARYEBWA MUTWARIBI","orcid":"https://orcid.org/0009-0001-8959-1614","observed_orcids":["https://orcid.org/0009-0001-8959-1614"]},"institutions":[{"id":"https://openalex.org/I2752562790","display_name":"Kampala International University","ror":"https://ror.org/017g82c94","country_code":"UG","type":"education","lineage":["https://openalex.org/I2752562790"]}],"countries":["UG"],"is_corresponding":true,"raw_author_name":"MUTWARIBI, KATARYEBWA","raw_affiliation_strings":["Kampala international University"],"raw_orcid":"https://orcid.org/0009-0001-8959-1614","affiliations":[{"raw_affiliation_string":"Kampala international University","institution_ids":["https://openalex.org/I2752562790"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5160123844"],"corresponding_institution_ids":["https://openalex.org/I2752562790"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.88674791,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.00930000003427267,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.005799999926239252,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/zero-trust-architecture","display_name":"zero-trust architecture","score":0.9160000085830688},{"id":"https://openalex.org/keywords/identity-verification","display_name":"identity verification","score":0.6800000071525574},{"id":"https://openalex.org/keywords/continuous-security-monitoring","display_name":"continuous security monitoring","score":0.9760000109672546},{"id":"https://openalex.org/keywords/incident-response","display_name":"incident response","score":0.5820000171661377},{"id":"https://openalex.org/keywords/access-control-implementation","display_name":"access control implementation","score":0.6060000061988831},{"id":"https://openalex.org/keywords/security-governance","display_name":"security governance","score":0.6679999828338623},{"id":"https://openalex.org/keywords/conceptual-framework","display_name":"conceptual framework","score":0.37700000405311584}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5034000277519226},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.4927999973297119},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.4659999907016754},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.4584999978542328},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.44119998812675476},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.43389999866485596},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4221999943256378},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4178999960422516},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.414000004529953},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.40230000019073486},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.37689998745918274},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3747999966144562},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.36820000410079956},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.3208000063896179},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.31049999594688416},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.30720001459121704},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.3052999973297119},{"id":"https://openalex.org/C31957729","wikidata":"https://www.wikidata.org/wiki/Q5282877","display_name":"Distancing","level":5,"score":0.29089999198913574},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.29030001163482666},{"id":"https://openalex.org/C108170787","wikidata":"https://www.wikidata.org/wiki/Q3951828","display_name":"Agency (philosophy)","level":2,"score":0.288100004196167},{"id":"https://openalex.org/C100363876","wikidata":"https://www.wikidata.org/wiki/Q690661","display_name":"Nonprobability sampling","level":3,"score":0.2872999906539917},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.27790001034736633},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.26269999146461487},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2606000006198883},{"id":"https://openalex.org/C71008984","wikidata":"https://www.wikidata.org/wiki/Q2890076","display_name":"Rigour","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C129631789","wikidata":"https://www.wikidata.org/wiki/Q334173","display_name":"Opportunism","level":2,"score":0.2574999928474426},{"id":"https://openalex.org/C57041688","wikidata":"https://www.wikidata.org/wiki/Q220644","display_name":"Service-oriented architecture","level":3,"score":0.25360000133514404}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23766568","doi":"https://doi.org/10.5281/zenodo.23766568","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23766568","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.23766569","doi":"https://doi.org/10.5281/zenodo.23766569","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23766569","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23766568","doi":"https://doi.org/10.5281/zenodo.23766568","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23766568","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4414492131","https://openalex.org/W7204694258","https://openalex.org/W7204151993","https://openalex.org/W4415723455","https://openalex.org/W4415222666","https://openalex.org/W7220712475","https://openalex.org/W4411610551","https://openalex.org/W4309346267","https://openalex.org/W4410501796","https://openalex.org/W7131967196"],"abstract_inverted_index":{"Zero":[0],"Trust":[1],"Architecture":[2],"(ZTA)":[3],"is":[4,110],"increasingly":[5],"proposed":[6],"as":[7],"an":[8,30,160],"alternative":[9],"to":[10,33,61],"security":[11,54,186],"models":[12],"that":[13,149,194],"grant":[14],"implicit":[15],"trust":[16],"on":[17,145],"the":[18],"basis":[19],"of":[20,68],"network":[21,57],"location.":[22],"However,":[23],"architectural":[24,76],"adoption":[25,210],"does":[26],"not":[27,218],"itself":[28],"demonstrate":[29],"organisation's":[31],"ability":[32],"withstand,":[34],"contain":[35],"and":[36,56,72,82,101,126,132,163,182,188,202,216],"recover":[37],"from":[38],"cyber":[39],"incidents.":[40],"This":[41],"critical":[42],"conceptual":[43,165,215],"review":[44,67,192],"examines":[45],"how":[46],"continuous":[47,53],"identity":[48,125],"verification,":[49],"least-privilege":[50],"access":[51,150],"control,":[52],"monitoring":[55],"micro-segmentation":[58],"may":[59],"contribute":[60],"organisational":[62,120,169],"cybersecurity":[63],"resilience.":[64,121],"A":[65],"purposive":[66],"fourteen":[69],"scholarly,":[70],"technical":[71,84],"practitioner":[73],"sources":[74],"distinguishes":[75],"reasoning,":[77],"implementation":[78],"guidance,":[79],"deployment":[80],"experience":[81],"bounded":[83],"evaluation.":[85],"The":[86,155,191],"synthesis":[87],"finds":[88],"a":[89,115,164,208,223],"coherent":[90],"rationale":[91],"for":[92,107,114,167],"restricting":[93],"access,":[94],"reducing":[95],"privilege":[96],"exposure,":[97],"improving":[98],"actionable":[99],"detection":[100],"limiting":[102],"movement":[103],"across":[104],"resources.":[105],"Evidence":[106],"these":[108],"mechanisms":[109],"stronger":[111],"than":[112,207],"evidence":[113],"uniform":[116],"causal":[117,227],"improvement":[118],"in":[119,229],"Implementation":[122],"fidelity,":[123],"reliable":[124],"asset":[127],"information,":[128],"staff":[129],"capability,":[130],"governance":[131],"incident-response":[133],"capacity":[134],"shape":[135],"whether":[136],"intended":[137],"controls":[138],"become":[139],"effective":[140],"protection.":[141],"Recovery":[142],"also":[143],"depends":[144],"complementary":[146],"restoration":[147],"arrangements":[148],"control":[151],"cannot":[152],"supply":[153],"alone.":[154],"article":[156],"develops":[157],"five":[158],"propositions,":[159],"operationalisation":[161],"matrix":[162],"framework":[166],"future":[168],"research.":[170],"It":[171],"recommends":[172],"service-based":[173],"scoping,":[174],"accountable":[175],"policy":[176],"ownership,":[177],"staged":[178],"deployment,":[179],"documented":[180],"exceptions":[181],"evaluation":[183],"using":[184],"both":[185],"outcomes":[187,205],"operational":[189],"consequences.":[190],"concludes":[193],"ZTA":[195],"should":[196],"be":[197],"assessed":[198],"through":[199],"coverage,":[200],"functioning":[201],"measurable":[203],"service":[204],"rather":[206],"binary":[209],"label.":[211],"Its":[212],"findings":[213],"are":[214],"do":[217],"represent":[219],"new":[220],"participant":[221],"data,":[222],"meta-analysis":[224],"or":[225],"demonstrated":[226],"effects":[228],"Uganda.":[230]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-30T00:00:00"}