NIST invites comments on Draft Special Publication 800-207, Zero Trust Architecture, which discusses the core logical components that make up a ZTA network strategy. “Zero trust” refers to an evolving set of network security paradigms that narrows defenses from wide network perimeters to individuals or small groups of resources, protecting resources rather than network segments.
This document also establishes an abstract definition of ZTA as well as general deployment models, use cases where ZTA could improve an enterprise’s overall IT security posture, and a high-level roadmap to implementing a ZTA approach for an enterprise.
A public comment period is until November 22.
