simpl.
로그인
사이버보안 GRC 17개 항목

Zero Trust Architecture Assessment (NIST 800-207)

이 체크리스트는 영어로 제공됩니다.

Assesses maturity against the zero trust tenets and pillars defined in NIST SP 800-207 and the CISA Zero Trust Maturity Model.

NIST 800-207CISA ZTMMNIST 800-53

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Zero Trust Tenets & Governance

  • Has the organization defined protect surfaces and mapped transaction flows for critical resources? *
  • Is access to resources granted per-session on a least-privilege basis? *
  • Are access decisions made by a policy decision point evaluating dynamic signals? *
  • Is a documented zero trust strategy and roadmap approved by leadership?

Identity Pillar

  • Is every access request authenticated regardless of network location? *
  • Is phishing-resistant MFA enforced for all users? *
  • Are risk-based and continuous authentication signals evaluated at access time? *

Device Pillar

  • Is device posture (patch level, EDR status, compliance) verified before granting access? *
  • Is a real-time inventory of all assets accessing resources maintained? *
  • Are non-compliant or unmanaged devices denied or quarantined? *

Network & Environment

  • Is the network micro-segmented so lateral movement is restricted? *
  • Is all traffic, including internal east-west, encrypted? *
  • Are software-defined perimeters or identity-aware proxies used in place of implicit trust zones?

Application, Data & Visibility

  • Are applications accessed through brokered, authenticated sessions rather than direct network exposure? *
  • Is data classified and access governed by data-centric policies? *
  • Are all access decisions and resource activity logged for analytics? *
  • Is telemetry aggregated to continuously improve policy?

Zero Trust Architecture Assessment (NIST 800-207) 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.