https://www.cisa.gov/publication/zero-trust-maturity-model Skip to main content United States Flag An official website of the United States government Here's how you know * EMAIL US * CONTACT * SITE MAP Dot gov Official websites use .gov A .gov website belongs to an official government organization in the United States. SSL Secure .gov websites use HTTPS A lock (lock icon) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites. Cybersecurity and Infrastructure Security Agency CISA Enter Search Terms(s): [ ] search icon COVID Questions Cyber Issues --------------------------------------------------------------------- US Department of Homeland Security CISA Cyber + Infrastructure Toggle navigation Enter Search Terms(s): [ ] search icon CISA Navigation * Cybersecurity * Infrastructure Security * Emergency Communications * National Risk Management * About CISA * Media --------------------------------------------------------------------- US Department of Homeland Security CISA Cyber + Infrastructure TLP:WHITE TLP:WHITE Publications Library * Academic Engagement * Accessibility * Border Security * Cybersecurity * Disasters * Economic Security * Election Security * Emergency Communications * First Responders * Homeland Security Careers * Homeland Security Enterprise * Immigration and Customs Enforcement * Infrastructure Security * International Engagement * Law Enforcement Partnerships * National Terrorism Advisory System * Preventing Terrorism * Privacy * REAL ID * Resilience * SAFECOM * Transportation Security * Weapons of Mass Destruction Zero Trust Maturity Model --------------------------------------------------------------------- CISA's Zero Trust Maturity Model is one of many roadmaps for agencies to reference as they transition towards a zero trust architecture. The goal of the maturity model is to assist agencies in the development of their zero trust strategies and implementation plans and present ways in which various CISA services can support zero trust solutions across agencies. The maturity model, which include five pillars and three cross-cutting capabilities, is based on the foundations of zero trust. Within each pillar, the maturity model provides agencies with specific examples of a traditional, advanced, and optimal zero trust architecture. Public Comment Period - NOW OPEN! CISA drafted the Zero Trust Maturity Model in June to assist agencies in complying with the Executive Order. While the distribution was originally limited to agencies, CISA is excited to release the maturity model for public comment. CISA is releasing the Zero Trust Maturity Model for public comment beginning Tuesday, September 7, 2021 and concludes on Friday, October 1, 2021. CISA is interested in gathering feedback focused on the following key questions: * Has this document been helpful to your agency as you prepared your Cyber Executive Order zero trust implementation plan? If not, what guidance could be added? * Does your agency have suggestions on how better to delineate the 5 pillars from the 3 crosscutting capabilities--Visibility and Analytics, Automation and Orchestration, and Governance? * Which pillars do you think are the best defined and which pillars need help? * How could the Zero Trust Maturity Model better support your agency's Cyber Executive Order zero trust implementation plan? Reviewers can submit their feedback to tic@cisa.dhs.gov. Following the close of the comment period, CISA will produce an updated version of the guidance. Taxonomy Topics Cybersecurity Attachment Media Publication File Zero Trust Maturity Model (Draft)978.98 KB Cybersecurity & Infrastructure Security Agency CONTACT SUBSCRIBE Facebook Twitter Linked in Instagram YouTube Mail REPORT Need CISA's help but don't know where to start? Contact CISA Central Accountability Privacy Policy FOIA No Fear Act Accessibility Plain Writing Plug-ins Inspector General DHS The White House USA.gov