NSA's zero-trust maturity for AppSec: What you need to know

The National Security Agency (NSA) is providing guidance on deploying a comprehensive zero-trust framework focused on the application and workload pillar of the Cybersecurity and Infrastructure Security Agency (CISA's) Zero Trust Maturity Model. 

The NSA explained in its Cybersecurity Information Sheet (CSI), “Advancing Zero Trust Maturity Throughout the Application and Workload Pillar" (PDF document):

"The application and workload pillar focuses on securing access at the application layer by integrating capabilities from the user, device, and network and environment pillars …

agency application appsec cisa csi cybersecurity explained framework guidance information infrastructure infrastructure security maturity national national security national security agency nsa security trust trust framework workload zero trust zero trust maturity