CISA ZTMM V2 — CISA Zero Trust Maturity Model V2

The CISA Zero Trust Maturity Model V2 is a guidance framework designed to help organizations develop and implement zero trust strategies. The model features five pillars—Identity, Device, Network, Application Workload, and Data—and incorporates three cross-cutting capabilities: Visibility and Analytics, Automation and Orchestration, and Governance. Each pillar includes maturity examples ranging from traditional setups to advanced zero trust architectures. Released by the US Department of Homeland Security, it is considered a foundational document for building robust zero trust capabilities within organizations. The model emphasizes iterative improvement and provides actionable insights at different stages of maturity.