Zero Trust Architecture Implementation
IDCYSE8003

Module 1: Zero Trust Principles and Federal Implementation Drivers

• Examine zero trust principles, core tenets, and the federal policies and mandates driving adoption across government environments.

Module 2: Current-State Assessment and Zero Trust Maturity

• Evaluate the current security environment and establish a maturity baseline using the CISA Zero Trust Maturity Model.

Module 3: Identity, Credential, and Access Modernization

• Apply identity, credential, and access management principles as the foundation of a zero trust architecture.

Module 4: Device, Network, and Workload Trust Enforcement

• Enforce trust requirements across devices, networks, workloads, and other components of the technology environment.

Module 5: Application, Data, and Policy Enforcement Architecture

• Design policy enforcement mechanisms that protect applications and data based on identity, context, risk, and least-privilege access.

Module 6: Visibility, Analytics, Automation, and Threat Response

• Use centralized visibility, security analytics, automation, and threat response capabilities to support continuous trust evaluation.

Module 7: Implementation Roadmaps, Governance, and Performance Metrics

• Develop a phased implementation roadmap, establish governance responsibilities, and define metrics for measuring zero trust progress and performance.

Module 8: Designing a Zero Trust Implementation Plan Capstone

• Produce a comprehensive zero trust implementation plan that addresses maturity, architecture, governance, priorities, milestones, and performance measures.