ZT (DoD)

Zero Trust (DoD) -- Reference Documents.

1. DoD ZT Capability Execution Roadmap. -- (Jan 2023)

   1. PDF Versions

      • Dec 2024: https://dodcio.defense.gov/Portals/0/Documents/Library/ZT-ExecutionRoadmap-v1.1.pdf -- (54 slides)

      • Jan 2023: https://dodcio.defense.gov/Portals/0/Documents/Library/ZTCapabilityExecutionRoadmap.pdf (38 slides)

      • BLUF: This document outlines the capabilities and activities needed to achieve Zero Trust, with a focus on different courses of action (COAs) and implementation plans.

      • DoD's 7 Pillars (see Slide 7 w/ Timeline, from FY23-FY32): 

        1. User*:

        2. Device*:

        3. Application and Workload*:

        4. Data*:

        5. Network and Environment*:

        6. Automation & Orchestration*:

        7. Visibility & Analytics*:

      • Goals & Objectives for each Pillar: (see Slide 10)

      • CISA's ZTMM. (see Page 7) -- BLUF: 5 Pillars, 3 Cross-Cutting Capabilities, each having 4 maturity levels. 

        1. Identity*:

        2. Devices*:

        3. Networks*:

        4. Applications & Workloads*:

        5. Data*:

        6. Cross-Cutting Capabilities: (3)

           • (1) Visibility and Analytics

           • (2) Automation & Orchestration 

           • (3) Governance 

2. DoD ZT Reference Architecture. -- (v2.0, July 2022)

   1. PDF: https://dodcio.defense.gov/Portals/0/Documents/Library/%28U%29ZT_RA_v2.0%28U%29_Sep22.pdf , (104p)

      • BLUF: This reference architecture aligns with the DoD definition of Zero Trust and provides authoritative information on the subject

      • Prepared by DISA and the National Security Agency (NSA) Zero Trust Engineering Team.

      • DoDAF methodology was used.