Cyber Risks · Qualys Blog

Adopting an Effective and Easy To Implement Zero Trust Architecture | Qualys

Summary: President Biden's Executive Order 14028 made zero-trust architecture the guiding security model for the federal government, and federal civilian executive branch agencies are all tasked with creating and using one. According to the Office of Management and Budget, which audits cybersecurity efforts for twenty-three agencies, all but two grades in 2022 were B's and C's, while Okta's State of Zero Trust 2022 report found that 97 percent of surveyed companies planned a zero-trust initiative but only 55 percent had actually initiated a plan.

What's compelling: Three separate zero-trust models - NIST SP 800-207, CISA's five-pillar Maturity Model 2.0, and DoD's seven pillars - govern the same mandate, and OMB's audit of twenty-three agencies returned all B's and C's, which tells you how much room remains between a stated plan and a working architecture.

Read the original at Qualys Blog ↗

Topics
Governance, Risk & Compliance
Related
Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026