Zero Trust for Federal Employees: A Practical Introduction to NIST SP 800-207 Webinar

Zero trust has moved from policy memo to daily operations. Agencies are adding phishing-resistant MFA, segmenting networks, and dropping the assumption that being “on the network” means being trusted. This webinar gives you the foundation: NIST SP 800-207, the vendor-neutral standard behind federal zero trust strategy.

You'll learn NIST's seven tenets in plain language and see how an access decision is made, from the Policy Engine's ruling to the enforcement point that opens or closes the door. Short real-world scenarios and quick polls will help you apply the concepts and place your agency on CISA's five pillars and maturity stages.

We'll finish with how zero trust builds on programs your agency already runs, such as FICAM, CDM, TIC 3.0, and RMF, and NIST's one-workflow-at-a-time migration path. You'll leave with a clear mental model and the vocabulary to join your agency's zero trust conversations.

Key Takeaways

Explain NIST SP 800-207's seven tenets of zero trust in plain language
Trace how an access decision moves from the Policy Engine to the enforcement point that grants or denies access
Place your agency on CISA's five zero trust pillars and maturity stages
Recognize how zero trust builds on programs you already run, including FICAM, CDM, TIC 3.0, and RMF
Apply NIST's one-workflow-at-a-time migration path to start zero trust conversations at your agency

What You’ll Learn

Explain the core idea of zero trust, “no implicit trust based on network location or asset ownership,” and why NIST calls it a plan, not a product.
Describe NIST's seven tenets and how they shape access to your agency's systems and data.
Identify the roles of the Policy Engine, Policy Administrator, and Policy Enforcement Point, and trace how a single access request is granted, denied, or revoked.
Compare the three NIST approaches to building a ZTA and match deployment models to common federal scenarios.
Connect zero trust to existing federal programs (FICAM, CDM, TIC 3.0, RMF) and CISA's five-pillar maturity model, and outline the first steps of a phased migration.

Take The Next Step With a Relevant Course

Zero Trust Fundamentals for Government Agencies

IDTECH9145
Weekdays only
4 Hours
Open to beginners

Understand Zero Trust for government - 'never trust, always verify,' the federal strategy and pillars driving it, and what it changes for everyday staff.

AI Security Foundations Certificate Program

IDCYSE.AICP
Weekdays only
18 Hours
Open to beginners

Secure and govern AI inside a federal environment — from the threat landscape through to a working agency AI security and governance program.

ICAM and MFA Fundamentals Course

IDCYSE7009
Weekdays only
6 Hours
Prerequisites required

A full day live on the identity layer: identity, proofing, authentication and MFA, authorization, federation, and the access decision itself — with phishing-resistant MFA at the center.

Cybersecurity Fundamentals for Government Employees

IDTECH9170
Weekdays only
6 Hours
Open to beginners

Practical cybersecurity awareness for the whole government workforce - threats, everyday habits, phishing defense, and the policies that shape your responsibilities.

Insider Threat Awareness Course

IDCYSE7002
Weekdays only
4 Hours
Open to beginners

A half-day live session on insider threat: what the indicators really look like, where to report them, and how insider threat reporting differs from a protected whistleblower disclosure.

AI Security & Governance for Government Course

IDTECH8003
Weekdays only
12 Hours
Open to beginners

Federal agencies are putting AI into service faster than the practices meant to govern and secure it. This intermediate course helps federal staff and their partners build an agency AI governance and security program rooted in federal AI policy and the NIST AI Risk Management Framework — covering AI inventories and risk classification, data governance and privacy, the AI development and acquisition lifecycle, machine learning and generative AI threats, and the oversight and monitoring that keep AI trustworthy, ending with a capstone plan you build yourself.

Cloud & FedRAMP Authorization Certificate Program

IDCYSE.CP.L3
Weekdays only
48 Hours
Open to beginners
1:1 Mentoring
1:1 Bonus Training

Assess, authorize, and sustain secure federal cloud services — and stay ahead of FedRAMP's move to the 20x model.

FedRAMP for Agency Buyers: Authorization Process and Cloud Service Selection Course

IDCYSE8150
Weekdays only
12 Hours
Open to beginners

Assess FedRAMP-authorized cloud services, drive the agency ATO process, and hold shared security responsibilities together across the service lifecycle.

Cloud Security Fundamentals for Federal Employees

IDCYSE7003
Weekdays only
6 Hours
Open to beginners

A jargon-free grounding in how federal cloud services get secured and where one party's responsibility ends and the other's begins.

FISMA & Continuous Monitoring Fundamentals Course

IDCYSE8001
Weekdays only
6 Hours
Prerequisites required

An ATO is a beginning, not an ending — federal systems must be watched continuously, with weaknesses tracked and risk reported to leadership over time. This intermediate course grounds Information Security Continuous Monitoring (NIST SP 800-137) in FISMA accountability: design an ISCM strategy, work findings through POA&Ms, and build the metrics and reporting that make ongoing authorization possible.

Phishing and Social Engineering Defense Course

IDCYSE7004
Weekdays only
4 Hours
Open to beginners

Recognize and shut down social engineering wherever it comes from — inbox, SMS, phone line, scanned code, or the lobby entrance. Designed to meet the federal yearly security awareness training mandate.