T/CATIS 028-2024 Zero Trust Capability Maturity Model

Scope

Scope: This document establishes a maturity model framework for an organization's zero-trust capabilities, specifies the capability requirements at each level, and provides capability assessment processes and methods at each level. This document is applicable to evaluating an organization's zero-trust capabilities and serving as a basis for organizations to build their zero-trust capabilities. Main technical content: The proposed zero-trust capability maturity model and capability assessment methods aim to assist and guide industry users in correctly evaluating the zero-trust capabilities required for an organization to achieve its target zero-trust architecture, thereby accurately setting the target zero-trust capability level, comprehensively planning the zero-trust capability building phase, and ultimately rationally controlling the total investment cost and migration time when evolving towards the target zero-trust architecture, effectively reducing the barriers and difficulties of zero-trust implementation.

Development Information

Related Standards