Cloud 101CircleEventsBlog
Missed CSA's Cyber Monday sale? You can still get 50% off the CCSK + CCZT Exam & Training Bundle and Token Bundle with raincheck code 'rcdoubledip24'

Download Publication

Map the Transaction Flows for Zero Trust
Map the Transaction Flows for Zero Trust
Who it's for:
  • Zero Trust implementation teams
  • Security managers, architects, and analysts
  • Business system owners
  • CISOs
  • Compliance officers

Map the Transaction Flows for Zero Trust

Release Date: 11/18/2024

The NSTAC Report to the President on Zero Trust defines five steps to implementing a Zero Trust security strategy. This publication provides guidance on executing the second step: mapping transaction flows for the protect surface. CSA is developing separate research documents to elaborate detailed guidance for each of the five steps. Explore Step 1, defining the protect surface, in our first publication.

The Zero Trust protect surface consists of Devices, Assets, Applications, and Services (DAAS). Mapping the transaction flows establishes granular visibility into communication between these elements, with other protect surfaces, and with users and external services. This helps you understand how the business system works before defining security policies in subsequent steps. 

The mapping methods explored in this document include comprehensive system analysis and leveraging scanning tools. The document also delves into how these methods can help refine protect surfaces and design Zero Trust architectures. Additionally, it outlines the benefits of mapping transaction flows and provides a maturity model for evaluating the effectiveness of transaction flow mapping practices. 

Navigate the complex task of understanding system architecture, transaction flows, and security maturity within the Zero Trust security model. Enhance your cybersecurity resilience and establish a foundation for enforcing an adaptive and robust security posture in your organization.

Key Takeaways:
  • A review of Zero Trust strategy and the five-step Zero Trust implementation process
  • How to validate the protect surface’s DAAS elements and refine their metadata 
  • How to identify and document users of the protect surface and the types of endpoint devices they use 
  • How to identify dependencies and transactions among DAAS elements, users, other business systems, and external services
  • How to map data flows
  • How to validate and refine the understanding of the relative sensitivity and security maturity of the system 
  • Specific considerations for cloud, OT, and IoT devices
  • Challenges of mapping transaction flows
  • Benefits of mapping transaction flows


Download this Resource

Bookmark
Share
Related resources
Top Threats to Cloud Computing 2024 - Japanese Translation
Top Threats to Cloud Computing 2024 - Japanese ...
AI Risk Management: Thinking Beyond Regulatory Boundaries
AI Risk Management: Thinking Beyond Regulatory ...
Top Concerns With Vulnerability Data
Top Concerns With Vulnerability Data
Test Time Compute
Test Time Compute
Published: 12/13/2024
Achieving Cyber Resilience with Managed Detection and Response
Achieving Cyber Resilience with Managed Detection and Response
Published: 12/13/2024
The Service Accounts Guide Part 1: Origin, Types, Pitfalls and Fixes
The Service Accounts Guide Part 1: Origin, Types, Pitfalls and Fixes
Published: 12/10/2024
Strengthening Cybersecurity with a Resilient Incident Response Plan
Strengthening Cybersecurity with a Resilient Incident Response Plan
Published: 12/10/2024

Acknowledgements

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.

Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. His lea...

Read more

Vinotth Ramalingam
Vinotth Ramalingam
Cybersecurity Product Leader at Dell Technologies

Vinotth Ramalingam

Cybersecurity Product Leader at Dell Technologies

Erik Johnson
Erik Johnson
Cloud Security Specialist & Senior Research Analyst, CSA

Erik Johnson

Cloud Security Specialist & Senior Research Analyst, CSA

Worked for the Federal Reserve for many years and volunteered with the CSA with a focus on CCM/CAIQ V4, specifically the STA domain, and developing a comprehensive framework and guidance for defining and managing the cloud shared security responsibility model (SSRM).

I recently retired from the Federal Reserve and am now consulting with the CSA as a Senior Research Analyst with a focus on Zero Trust and Financial Services.

Linke...

Read more

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training