← Security+ glossary

Control plane and data plane

In a Zero Trust architecture the control plane makes the decision to allow access (Policy Decision Point), while the data plane enforces that decision and passes or blocks the traffic (Policy Enforcement Point). Separating decision-making from enforcement is the foundation of the Zero Trust model.

All Security+ guides →