NIST Releases Enterprise Zero Trust Architecture Draft Document

mood · Sep 25, 2019

NIST defines zero trust architecture, releases use cases
September 24, 2019
https://www.fedscoop.com/nist-zero-trust-architecture-definition/

The National Institute of Standards and Technology wants feedback on its definition of zero trust security architecture and potential deployments — outlined in a draft special publication released Monday.

Zero trust refers to the narrowing of cyberdefenses from wide network perimeters to micro-perimeters around individual or small groups of resources, NIST says in the new guidance.
No implicit trust is given to systems based on their location, and user and device authentication is required prior to establishing a connection. This is particularly important as more employees work remotely and data is migrated to the cloud.

“[M]any organizations already have elements of a ZTA in their enterprise infrastructure today,” reads the document. “Organizations should seek to incrementally implement zero trust principles, process changes, and technology solutions that protect its data assets and business functions.”
In addition to providing a ZTA roadmap, the document highlights a number of use cases including agencies with satellite facilities, multi-cloud environments and contracted services.
Click to expand...

NIST: Zero Trust Architecture - SP 800-207 (DRAFT)

mood · Jan 29, 2020

NIST adds zero-trust ‘approaches’ to its security architecture guidance for agencies
January 28, 2020
https://www.fedscoop.com/nist-zero-trust-approaches-guidance/

The National Institute of Standards and Technology wants agencies to consider their approach to zero-trust security architecture when it re-releases a draft special publication for public comment — tentatively in early February.

NIST released the first draft in September, defining zero-trust as the narrowing of cyberdefenses from wide network perimeters to micro-perimeters around individual or small groups of resources.
NIST added a section on approaches to its guidance after the first comment period resolved.
Frazier said he expects the guidance will be “streamlined” after vendors attempt to make their own additions to the document [...]

Once the special publication is finalized, NIST plans follow-on documents diving deeper into the relationship between zero trust and technologies spanning microservices, identity management, and machine learning and artificial intelligence, Rose said.
Click to expand...

Log in or Sign up

NIST Releases Enterprise Zero Trust Architecture Draft Document

mood Updates Team

mood Updates Team

Draft Cyber Supply Chain Risk Management Guidance Published by NIST

CISA Releases Draft of Binding Operational Directive on Developing a Vulnerability Disclosure Policy

DHS issues draft order to require vulnerability disclosure policies at civilian agencies

Microsoft releases biannual digital trust reports

‘The Cyberthreat Handbook’ Released, Documents ‘Who’s Who’ of Attackers

Log in or Sign up

NIST Releases Enterprise Zero Trust Architecture Draft Document

mood Updates Team

mood Updates Team

Draft Cyber Supply Chain Risk Management Guidance Published by NIST

CISA Releases Draft of Binding Operational Directive on Developing a Vulnerability Disclosure Policy

DHS issues draft order to require vulnerability disclosure policies at civilian agencies

Microsoft releases biannual digital trust reports

‘The Cyberthreat Handbook’ Released, Documents ‘Who’s Who’ of Attackers

Useful Searches