Gartner expected only 10% of large enterprises to have a mature zero trust program by 2026. Here is what the NIST standard actually requires and what it costs.