Splunk security strategist James Young highlights lessons learned embracing zero-trust practices internally and what agencies can learn from the experience.