CISA considers next steps for zero trust guidance with work on applications, OT under development

The Cybersecurity and Infrastructure Security Agency is looking into additional ways to support agencies’ transition to zero trust following the update to the zero trust maturity model, with potential new guides on applications and supporting Operational Technology environments.

The guidance would be in the form of “technical annexes,” CISA’s Sean Connelly said during a recent webinar, rather than a major update to the model. Applications is one of the model’s five technology pillars, while OT guidance would provide details...