Zero Trust Phase 3

Background

The project's purpose is to continue to determine the impact Zero Trust initiatives have currently on federal agencies and start planning for future engagements. The Zero Trust project has been a phased approach, this being the third phase in the overall assessment of the impact of zero trust to federal agencies.  

Overall Project Objective and Mission

The purpose of this project is to continue to increase knowledge of zero trust and provide greater understanding to the purpose across the Federal Government. This will include mapping out capabilities and tools that will assist in the transition to a zero trust infrastructure approach. This will be a three-part project that runs in parallel of each other:

  • Part 1: Playbook for Use Cases
    • This will be a built based on the playbook for cloud that DISA has provided.
  • Part 2: Method for evaluating vendor products and how they can be beneficial in a zero trust infrastructure environment.
  • Part 3: Cross walk between the various federal cyber frameworks. This is important to ensure federal agencies understand and use the same terminology when it comes to zero trust and how to implement it.

Deliverables:

  • Part 1: Playbook for Use Cases
  • Part 2: Methodology for Evaluating Vendor Products
  • Part 3: Whitepaper (Cross walk between the various Federal Cyber Frameworks)

Membership:

Membership consists of federal and industry cybersecurity professionals with an understanding of the CISA and DoD Zero Trust Maturity Models. Members should have interest in cybersecurity models to include CISA’s Trusted Internet Connection 3.0 guidelines. Members should have 1+ years of technical experience in one or more of the following areas of expertise:

  • Network Engineering
  • Network Security
  • Endpoint Security
  • Identity Credential & Access Management
  • SIEM and Cyber Data Lake
  • Automation & Orchestration
  • DevSecOps 

Members should have interest in cross collaboration with Government and Industry partners.

 

Supporting Artifacts:

https://www.cisa.gov/zero-trust-maturity-model

https://www.actiac.org/documents/zero-trust-project-briefing

https://www.actiac.org/documents/zero-trust-cybersecurity-current-trends

 

Consumer Financial Protection Bureau (CFPB)

Part 1: Playbook for Use Cases, https://www.actiac.org/documents/zero-trust-phase-3
Part 2: Methodology for Evaluating Vendor Products, https://www.actiac.org/documents/zero-trust-phase-3
Part 3: Whitepaper (Cross walk between the various Federal Cyber Frameworks), https://www.actiac.org/documents/zero-trust-phase-3

Click on e-mail address to send e-mail to a Project Lead.
Tiina Rodrigue
Wayne Rodgers
Christy Schelich

Status

Completed

Project Completion

Dec 31, 2024

RFA, Project, or Activity?