Organizations across the globe are embracing the idea of Zero Trust. While the security industry is aligning itself to enable this powerful strategy, many companies still don't quite grasp the Zero Trust concept. This report provides a methodology that security and risk (S&R) professionals can use to help their organization move beyond merely adopting the idea of Zero Trust and actually make progress toward the end state: Zero Trust infrastructure.