Dr. Vianney C.Cybersecurity Advisory
NIST SP 800-207CISA ZTMM 2.05 PillarsSecure by Design

Security Architecture & Zero Trust

Assess and mature a zero-trust architecture across the five CISA pillars — identity, devices, networks, applications & workloads, and data — plus the cross-cutting capabilities, aligned to NIST SP 800-207 and CISA Zero Trust Maturity Model 2.0.

Assessment progress
0%
0 of 0 items complete ·

1Overview & quick checklist

Zero trust replaces implicit network trust with per-request verification across five pillars. This tool assesses each pillar and the cross-cutting capabilities; the quick checklist is the headline item per pillar. Advance each pillar Traditional → Initial → Advanced → Optimal.

2Domain playbooks

Each playbook pairs best-practice guidance with a step-by-step how-to and a trackable checklist. Ticks feed the progress bar above.

3CISA Zero Trust Maturity Model 2.0

Five pillars, three cross-cutting capabilities, four maturity stages. Pillars can mature at different rates — assess each and advance deliberately.

PillarsCross-cuttingMaturity stages
1. IdentityVisibility & AnalyticsTraditional
2. DevicesAutomation & OrchestrationInitial
3. NetworksGovernanceAdvanced
4. Applications & WorkloadsOptimal
5. Data

NIST SP 800-207 core: the Policy Engine (decides) + Policy Administrator (executes) form the Policy Decision Point; the Policy Enforcement Point enforces access on the data plane. Seven tenets; "never trust, always verify."

Sources: NIST SP 800-207 · CISA ZTMM 2.0 · CISA Secure by Design.