The updated maturity model adds an additional maturity stage – optimal – alongside traditional, initial and advanced.

The latest guidance will update key definitions and metrics for the governmentwide adoption of zero-trust security architectures.

About 86% of agencies increased their zero-trust budgets and 66% implemented multi-factor authentication, according to an Okta-commissioned report.

Next up the agency will publish finalized TIC 3.0 cloud use cases and a new version of the Zero Trust Maturity Model.

Software-as-a-Service, Platform-as-a-Service, Infrastructure-as-a-Service and email will all be covered.

Gerald Caron says his office developed a functional capabilities model to game out its move to zero trust.