Topic starter
11/11/2026 6:06 pm
TL;DR: Zero trust breaks down when device visibility is incomplete, according to Lansweeper, because unseen assets make policy enforcement inconsistent. Security teams need continuous discovery and classification before identity controls can reliably govern access.
Editorial analysis by NHI Mgmt Group, based on content published by Lansweeper: “Why Most Organizations Fail at Zero Trust Device Visibility”.
Key questions
Q: Why do unmanaged devices complicate zero trust access decisions?
A: Because zero trust depends on continuous verification, and unmanaged devices weaken the confidence you can place in the session context.
Q: How should teams measure zero trust readiness for device visibility?
A: Measure zero trust readiness for device visibility by checking whether every device is continuously identified, inventoried, posture-assessed, and tied to a trusted policy decision before access is granted.
Q: How do I discover unknown devices in a zero trust programme?
A: Use continuous asset discovery across endpoints, servers, cloud workloads, IoT and OT assets, then reconcile those findings with your authoritative inventory.
Practitioner guidance
- Build a continuously updated asset inventory Map endpoints, servers, cloud workloads, IoT and OT assets into a single source of truth and keep it updated through automated discovery.
- Tie access policy to device posture Use compliance state, patch level, ownership and location to decide whether a device receives access, step-up verification or denial.
- Reconcile CMDB records with live discovery Compare configuration records against current network observations so stale or missing assets do not silently bypass zero trust controls.
Bottom line: Zero trust breaks when organisations cannot see the devices that are asking for access, because unknown assets make policy enforcement inconsistent.
Glossary terms: Zero Trust, Device visibility, Asset Intelligence, Shadow IT
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/11/2026 6:07 pm
Device visibility is the control that converts zero trust from a policy statement into an enforceable operating model. Identity verification alone cannot compensate for an unknown endpoint, unmanaged workload or shadow asset. In hybrid environments, the policy engine can only act on what discovery has surfaced and classified, so asset intelligence becomes part of governance rather than a separate hygiene task.
A few things that frame the scale:
- 96% of security operations teams report critical blind spots, most commonly in cloud infrastructure (74%) and identity and access behaviour (67%).
A question worth separating out:
Q: How should teams measure zero trust readiness for device visibility?
A: Measure zero trust readiness for device visibility by checking whether every device is continuously identified, inventoried, posture-assessed, and tied to a trusted policy decision before access is granted. Strong programmes combine device discovery, endpoint posture checks, certificate-based device authentication, and telemetry from EDR, MDM, or NAC so unknown, unmanaged, or non-compliant devices are quarantined or denied access.
👉 Read our full editorial: Zero trust needs device intelligence to enforce access policy