NIST adds details on latest implementations for zero trust project in second draft publication out for review

NIST’s National Cybersecurity of Excellence has updated its four-volume practice guide for zero trust architecture, describing findings in a second public draft from its ongoing project testing out various concepts through implementation builds.

The agency also released a fifth volume for the first time. It provides “a risk analysis and mapping of ZTA security characteristics to cybersecurity standards and recommended practices,” according to a release.

The NCCoE project is based on NIST Special Publication 800-207. Comments will be...