by Basically, the main task of NIST in the United States is to formulate national standards and provide important syllabuses that the U.S. federal government can follow. Therefore, in NIST SP 800-207, it also specifically explains the operation of the zero-trust architecture, which is related to the existing federal guidelines in the United States. , including the information security framework proposed by the US government in various aspects, as well as regulatory requirements. Chapter 6: The Relevance of Zero Trust Architecture to Existing Federal Guidelines in the United States NIST pointed out that Zero Trust Architecture and some existing federal policies and guidelines interact in planning, deployment and operation. Basically, these policies, while influencing the development of a zero trust strategy, are not intended to prohibit companies from moving towards a zero trust oriented architecture. When combined with existing cybersecurity policies and guidelines, ICAM, continuous monitoring, and general cyber hygiene, ZTA can strengthen an organization’s security posture against common threats.
