CSA Zero Trust Program Management Guidance

As organizations adopt Zero Trust (ZT) security strategies, it is critical they have the appropriate guidance and resources to steer their efforts and make informed decisions. Various factors influence and differentiate one ZT program from another.  Organizations share common ZT principles, but ZT implementations will differ, just as aligning your security strategy and business strategy for your organization make your cybersecurity program unique.
This document provides tools and techniques others found useful in their ZT journey. This guidance provides building blocks to establish and effectively manage your Zero Trust program. Strategic considerations are discussed for program initiation, structured implementation, and coordination of discrete projects to sustain progress as an organizational imperative. Emphasis is placed on foundational program management elements and reuse of an organization’s existing tools and techniques to achieve a continuous improvement program.