Steps to take to create a Zero Trust framework