thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

CISA Zero Trust Maturity Model (ZTMM)

CISA framework describing zero trust progress across five pillars and four maturity stages.

Definition

Version 2.0 (2023) defines the pillars Identity, Devices, Networks, Applications and Workloads, and Data, plus cross-cutting capabilities of Visibility and Analytics, Automation and Orchestration, and Governance. Maturity stages are Traditional, Initial, Advanced, and Optimal. US federal agencies use it to plan zero trust adoption.

Example

An agency rates its Devices pillar at Initial because asset inventory is manual and posture checks are limited.

Exam tip

Know the five pillars and four stages.

Related terms