The fast-evolving cyber threat scenario requires a rapid mindset change. To this end, Eni is focusing on building the consciousness and sensibility that zero trust needs. The foundation of its zero-trust strategy is the existing infrastructure, whose core functionality will be expanded by capitalizing on the investments already in place. The thrust will be on identity, of both users and devices, to be able to build security around this new organizational perimeter. Eni is evolving its access methodologies with modern and flexible technologies that allow for continuous risk assessment. Since cybersecurity objectives can only be met with the broader engagement of all IT functions, brief workshops have been held to create awareness and share how this new way of thinking about security can bring less complexity and more adaptative security. In Eni’s “IT Strategic 4Y Plan”, zero trust will feature as a fundamental pillar to increase the security posture, enable new business and lead technology improvements. At the same time, it is expected to increase scalability and visibility, while facilitating easier compliance with standards. The relevance of the zero-trust approach will be shared with Eni’s top management to ensure effective risk mitigation amid constantly changing threat scenarios.