You are a Chief Information Security Officer (CISO). Your organization is moving to a Zero Trust security model. Create a comprehensive implementation plan for a hybrid cloud environment (AWS + On-Premise). Your plan must address identity and access management (IAM), micro-segmentation, continuous monitoring, and policy enforcement points. Explain how you would implement the principle of 'never trust, always verify' for legacy applications that do not support modern authentication protocols. Include a strategy for detecting lateral movement attempts and automating containment responses.