网络安全 GRC 13 项
ZTNA / SASE Deployment Assessment
此检查清单为英文版。
Assesses a Zero Trust Network Access and SASE deployment covering identity-based access, policy enforcement, converged security services, and legacy VPN replacement.
NIST 800-207NIST 800-53CSA
免费 PDF 或 Word · 输入邮箱即可下载。
Zero Trust Access Foundations
- Is access granted per-application rather than by broad network access? *
- Is every access request authenticated and authorized based on identity and context? *
- Are internal applications cloaked from the public internet (no inbound exposure)? *
- Is device posture evaluated as part of the access decision? *
Policy & Enforcement
- Are least-privilege, context-aware access policies defined per application and role? *
- Is continuous session evaluation used to re-check trust during a session?
- Is the policy decision point integrated with the identity provider and MFA? *
Converged SASE Services
- Are secure web gateway (SWG) and cloud firewall services applied to internet-bound traffic? *
- Is CASB/DLP integrated within the SASE stack for data protection?
- Is traffic routed through geographically appropriate points of presence for performance?
Migration & Monitoring
- Is there a documented plan to retire legacy VPN as ZTNA coverage expands? *
- Are access logs centralized and forwarded to the SIEM? *
- Is user experience and access failure monitored to avoid business disruption?
下载完整的ZTNA / SASE Deployment Assessment检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。