A new survey shows 60% of US enterprises have deployed zero-trust architectures.

Identity-based access control is the most common starting point.

Full rollouts still take two to three years on average.