NIST updates zero trust project guidance with draft publication on risk and compliance management

The National Institute of Standards and Technology has released for public comment a second draft of the final volume in its five-part project focused on implementing zero trust architectures, with a spotlight on risk and compliance management.

Volume E of the National Cybersecurity Center of Excellence project provides details on risk analysis and discusses standards and best practices for ZTA security. The five-volume series is intended to complement NIST Special Publication 800-207, which defines ZTA and describes models...