Regardless of which security controls an organization implements first, zero trust should be at the forefront of cyber resilience strategy.