CISA Zero Trust Maturity Model
What is CISA Zero Trust Maturity Model?
CISA Zero Trust Maturity Model for federal agencies. It comprises 46 controls organised across 13 domains, and applies in the United States.
How CISA Zero Trust Maturity Model maps to other frameworks
All 46 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 13 domains CISA Zero Trust Maturity Model groups its controls into
Where CISA Zero Trust Maturity Model overlaps with the standards you already hold
What CISA Zero Trust Maturity Model means in your sector
What CISA Zero Trust Maturity Model means for your job
Questions people ask about CISA Zero Trust Maturity Model
What is CISA Zero Trust Maturity Model?
How many controls does CISA Zero Trust Maturity Model have?
Where does CISA Zero Trust Maturity Model apply?
What frameworks does CISA Zero Trust Maturity Model map to?
How do I get started with CISA Zero Trust Maturity Model compliance?
Query CISA Zero Trust Maturity Model programmatically
CISA Zero Trust Maturity Model, its 46 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CISA Zero Trust Maturity Model API reference and MCP config →What CISA Zero Trust Maturity Model requires, control by control
Each page carries the requirement text for one CISA Zero Trust Maturity Model control and what an assessor expects to see as evidence.
- ZTMM-APP-AO Applications Pillar: Automation and Orchestration
- ZTMM-APP-GOV Applications Pillar: Governance
- ZTMM-APP-TEST Applications Pillar: Application Security Testing
- ZTMM-APP-VA Applications Pillar: Visibility and Analytics
- ZTMM-DAT-AO Data Pillar: Automation and Orchestration
- ZTMM-DAT-AVAIL Data Pillar: Data Availability
- ZTMM-DAT-CAT Data Pillar: Data Categorization
- ZTMM-DAT-GOV Data Pillar: Governance
- ZTMM-DAT-VA Data Pillar: Visibility and Analytics
- ZTMM-DEV-AO Devices Pillar: Automation and Orchestration
How ready are you for CISA Zero Trust Maturity Model?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.