Why Zero Trust
Common Challenges
Implementation Difficulty / Overwhelming Process
User & Operational Impact / Employee Disruption
What the Assessment Covers
The assessment evaluates the organization's current Zero Trust capabilities across people, processes, technology, and physical infrastructure to identify gaps and determine where security controls can be strengthened.
Current Capability Evaluation
Assess existing security capabilities, controls, and Zero Trust maturity to establish the organization's current state and identify gaps.
Platform & Technology Analysis
Evaluate technologies supporting identity and access management, endpoints, cloud environments, network segmentation, applications, data, and continuous security monitoring.
People & Access
Evaluate how users, administrators, contractors, and other authorized individuals are identified, authenticated, granted access, and managed.
Process & Governance Examination
Review security policies, access practices, roles and privileges, governance, and operational processes supporting Zero Trust.
More detail
Where applicable, the assessment can consider relevant NIST and CISA Zero Trust guidance and organizational security requirements.
Physical Infrastructure
Consider physical access and infrastructure controls where they affect the organization's overall Zero Trust security approach.