Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
CISA Releases Zero Trust Maturity Model for Public Comment
The maturity model was drafted in June to help federal agencies comply with an executive order and is now ready for feedback.
1 Min Read
The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) today released a draft of its Zero Trust Maturity Model for public comment.
CISA's Zero Trust Maturity Model was designed as a road map for agencies to reference as they develop and implement their zero-trust architecture. The maturity model, drafted in June, was initially distributed to agencies and, as of today, is available for public feedback. The agency will collect input until Oct. 1, 2021, and will later publish an updated version based on comments.
The maturity model includes five pillars and three cross-cutting capabilities, officials state in a release, and it's based on the foundations of zero trust. Each pillar is meant to provide agencies with examples of a traditional, advanced, and optimal zero-trust architecture. The pillars are Identity, Device, Network/Environment, Application Workload, and Data.
CISA is specifically interested in collecting feedback on a list of questions:
Has this document been helpful to your agency as you prepared your Cyber Executive Order zero trust implementation plan? If not, what guidance could be added?
Does your agency have suggestions on how better to delineate the 5 pillars from the 3 crosscutting capabilities—Visibility and Analytics, Automation and Orchestration, and Governance?
Which pillars do you think are the best defined and which pillars need help?
How could the Zero Trust Maturity Model better support your agency’s Cyber Executive Order zero trust implementation plan?
Read CISA's release for more details and to access the draft.
About the Author(s)
You May Also Like
More Insights
Webinars
Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024
Events
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024
