Definition
Zero Standing Privilege (ZSP) is an operating model where no user account has permanently-elevated privileges; admin rights exist only when actively in use through Just-in-Time elevation.
In more depth
ZSP is the destination state for mature PAM programs. Permanent admin accounts disappear from the directory. Every privileged action requires JIT elevation. Every elevation is logged, reviewable, and time-bound.
The ZSP arc typically runs 18-36 months: inventory privileged accounts, vault credentials, then progressively eliminate standing access as JIT covers more use cases. The hard parts are application service accounts and break-glass procedures.
Want the work, not just the definition?