Key findings include: 

* Despite Zero Trust’s importance, knowledge and readiness gaps persist.        * Are over-privileged users the problem?                                                              * Device security needs more attention.