Thanks for sharing this, @Michael Roza. I added this to the ZTA agenda for tomorrow's meeting.
Michael Roza CPA, CISA, CIA, MBA, Exec MBA, CSA Research Fellow
Email 1: [email protected]
Phone: 32 4 76 31 05 40
Hello NIST team – thanks for publishing the draft Special Publication 1800-25B, Implementing a Zero Trust Architecture, and accepting public comments. The comments and feedback in this email and in the attached spreadsheet are on behalf of the Cloud Security Alliance's Zero Trust Working Group, of which I am co-chair. It's sourced from multiple people across multiple organizations, with different perspectives and opinions. I've tried to consolidate and normalize, but you will see, especially in the spreadsheet, some different points of view.
Overall, we recognize and appreciate the tremendous amount of work that went into this document, and into the definition and creation of the underlying architectures and use cases. We believe that this large process will be very beneficial to the industry. We also recognize that this is one step of many, and that the NCCoE team is driving multiple additional use cases and phases, which will grow in their complexity and value.
Thanks, and we look forward to continued collaboration on this.