Zero Trust: DoD Strategy

Zero Trust Strategy for the Department of Defense

The government can no longer depend only on traditional strategies and defenses to protect critical systems and data. Adoption of a Zero Trust mindset helps us assume attackers are already in our system. Given the cyber attacks the DoD faces on a continual basis, this is an easy and important assumption.

Mission:

Provide strategic guidance, direct alignment of efforts, and prioritize resources to accelerate Zero Trust adoption across the DoD.

Vision:

A DoD Information Enterprise secured by a fully-implemented, Department-wide Zero Trust cybersecurity framework

Goals:

1. Zero Trust Cultural Adoption
   A Zero Trust security framework and mindset guide the design, development, integration, and deployment of information technology across the DoD Zero Trust Ecosystem
2. DoD Information Systems Secured & Defended
   DoD cybersecurity practices incorporate and operationalize Zero Trust to achieve enterprise resilience in DoD information systems
3. Technology Acceleration
   Zero Trust-based technologies deploy at a pace equal to or exceeding industry advancements
4. Zero Trust Enablement
   DoD Zero Trust execution integrates with Department- and Component-level process

Zero Trust Pillars