Zero Trust architecture, Implementation & Maturity Model

Thanks all, for your participation in the latest Workstream 9 session.

Recap and follow-ups:

•   In Progress - the Zero Trust one-pager for business leaders

• Thanks Rajesh for drafting this

• Open to comments - https://docs.google.com/document/d/1OJLBFenVqQFClEO9I4p4IcmWGy6luBi0/edit?usp=sharing&ouid=104963799026343049987&rtpof=true&sd=true

• ACTION: Review and add any comments 

• Next up: Our biggest task for the first half of this year is tackling the documents around the 5-Step process

• Background :  CSA is creating a series of 6 documents elaborating on the 5-step Zero Trust process from the NSTAC report

• Current state:

• Background Primer is partially drafted : This is our first work task

• https://docs.google.com/document/d/1jV1wsOD_n9fUqyYGpPhS6StMyqwF_JYeiWvdrKOewfI/edit#heading=h.gjdgxs

• ACTION: Review in preparation for writing and revising

• Step 1: Defining the Protect Surface: This is in final review within CSA

• https://docs.google.com/document/d/1syCdJd0G4vfJneYRu7EpaxU48ERberJwraC5-NgoR_E/edit?usp=sharing

• ACTION: Review for background (comments period is closed)

• Step 2: Mapping the Transaction Flows : draft available for internal comments

• https://docs.google.com/document/d/1vaWzRhwJPov_1TAXknXZy0P3rYFlKNJi/edit#heading=h.gjdgxs

• ACTION: Review and comment

• Step 3: Build a Zero Trust Architecture

• We will begin work on this in earnest once we complete the Primer

Thanks all

Our next meeting is Wednesday, February 21, at 11am ET. See you then!

Jason

------------------------------
Jason Garbis, CISSP
Co-Chair, Zero Trust Working Group
Principal, Numberline Security
Author: Zero Trust Security: An Enterprise Guide
------------------------------