The Cybersecurity and Infrastructure Security Agency (CISA) has released an updated version of its Zero Trust Maturity Model.

The new version includes an initial stage to guide organizations at different starting points, as well as updates and new functions for all four stages of maturity. The model is aimed at federal agencies, but all organizations can benefit from reviewing it. The model is organised around five pillars: identity, devices, network, data and applications, and workloads. 

The model also presents ways in which various CISA services can support zero-trust solutions across agencies.
CISA also published a Response to Comments for Zero Trust Maturity Model, summarising feedback received during the 2021 public comment period.