LOWVulnerability
Verified
United States

CISA Releases Updated Zero Trust Maturity Model v3.0

Tuesday, March 17, 2026 at 10:00 AM UTC·Source: CISA

Executive Summary

CISA publishes Zero Trust Maturity Model v3.0 with updated guidance for identity, devices, networks, applications, and data pillars.

Analysis

CISA released version 3.0 of its Zero Trust Maturity Model, incorporating lessons from federal agency implementations and adding guidance for AI workloads, cloud-native architectures, and OT environments. The updated model introduces an "Advanced Plus" maturity level and includes specific metrics for measuring zero trust implementation progress. Federal agencies have until FY2027 to achieve "Advanced" maturity.
Source Attribution

Originally published by CISA on Mar 17, 2026. Verified by: CISA.

Related Threats