Zero standing privileges (ZSP) is an operating model in which persistent privileged access is removed or minimized and eligible identities receive narrowly scoped privilege only when needed. Access is commonly time-bound and created through JIT elevation or temporary credentials.
ZSP reduces the attack window but still requires governance of eligibility, approval, policy, session activity, exceptions and revocation.