A corporation's IT department is integrating a new framework that permits, ascertains, and applies various resources in accordance with established company policies.

Which principle should the department incorporate?

Authorization models

Zero trust

Policy$-$driven access control

AAA