The Use Case Discovery and Identification of IDs, Assets, and Data Flows depends on secure identification of data and metadata assets, before authentication, authorization and data flows can be defined. Historically we have ignored the eigenvectors of data assets, network and data flow directions in favour of naive trust in the boundaries of application, data and network concepts. We are paying for it now in terms of data breach increases in number and cost.
I suggest people start to focus on secure data architecture as the foundation of Zero Trust Architecture. Here is a basic starting point, Data Protection section of AWS Well Architected Framework
------------------------------
Nya Murray
Director
Trac-Car
------------------------------