DEPARTMENT OF WAR

Zero Trust Portfolio Management Office · Mission Portal

SESSION: AUTHENTICATED
MFA: PKI CERT · DEMO-NPE-4471
POLICY DECISION POINT: ENFORCING
Framework
DoW ZT — Phase One
Maturity Objective
Target Level
Phase One Progress
58% Complete
Activities Tracked
152
Guidance
NSA ZIG P1 · Jan 2026

Pillar Readiness

// never trust, always verify · assume breach · phase one capabilities per DoW ZT Framework

01

User

  • 1.3 Multi-Factor Authentication
  • 1.4 Privileged Access Management
  • 1.5 Identity Federation & Credentialing
  • 1.7 Least Privileged Access
  • 1.8 Continuous Authentication
71%ON TRACK
02

Device

  • 2.1 Device Inventory
  • 2.4 Remote Access
  • 2.5 Asset, Vulnerability & Patch Mgmt
  • 2.6 UEM / MDM
  • 2.7 EDR & XDR
68%ON TRACK
03

Application & Workload

  • 3.2 Secure Software Dev & Integration
  • 3.3 Software Risk Management
  • 3.4 Resource Authorization & Integration
54%ON TRACK
04

Data

  • 4.2 Enterprise Data Governance
  • 4.3 Data Labeling & Tagging
  • 4.4 Data Monitoring & Sensing
  • 4.5 Encryption & Rights Management
  • 4.6 Data Loss Prevention
47%AT RISK
05

Network & Environment

  • 5.1 Data Flow Mapping
  • 5.2 Software-Defined Networking
  • 5.3 Macro-Segmentation
  • 5.4 Micro-Segmentation
59%ON TRACK
06

Automation & Orchestration

  • 6.1 PDP & Policy Orchestration
  • 6.5 SOAR
44%AT RISK
07

Visibility & Analytics

  • 7.1 Log All Traffic
  • 7.2 SIEM
66%ON TRACK

Phase One Activity Tracker

// synthetic tracking data · activity IDs per DoW ZT Capabilities & Activities

IDActivityComponentStatusTarget
1.3.1Organizational MFA & Identity ProviderNETOPS DET 4 (SYN)COMPLETEFY26 Q1
1.4.1Implement System & Migrate Privileged Users Pt 1CPB-11 (SYN)IN PROGRESSFY26 Q2
1.7.1Deny User by Default PolicyNETOPS DET 4 (SYN)IN PROGRESSFY26 Q2
2.4.1Deny Device by Default PolicyJTF HQ J6 (SYN)COMPLETEFY26 Q1
2.7.1Implement EDR Tools & Integrate with C2CCPB-11 (SYN)IN PROGRESSFY26 Q3
4.3.1Implement Data Tagging & Classification ToolsDATA GOV CELL (SYN)AT RISKFY26 Q2
4.6.1Implement Enforcement Points (DLP)DATA GOV CELL (SYN)AT RISKFY26 Q3
5.4.1Implement Micro-SegmentationJTF HQ J6 (SYN)IN PROGRESSFY26 Q3
6.1.2Organization Access ProfileZT PfMO (SYN)NOT STARTEDFY26 Q4
7.1.2Log ParsingSOC WATCH (SYN)IN PROGRESSFY26 Q2

Controlled Document Library

// handling caveats are simulated for demonstration of browser-enforced controls

CTRL-DOC // SYNTHETIC

Phase One Implementation Brief

Internal memorandum · ZT PfMO · pillar gaps and enforcement priorities

OPEN DOCUMENT →
CTRL-DOC // SYNTHETIC

Activity Tracker Export

Machine-readable Phase One activity status · CSV

DOWNLOAD EXPORT ↓
CTRL-DOC // SYNTHETIC

Phase Two Execution Roadmap

Advanced-level activity sequencing · pending release

ACCESS DENIED — PDP POLICY
PUBLIC REFERENCE

NSA ZIG Phase One

U/OO/107297-26 · Cybersecurity Technical Report · Jan 2026

EXTERNAL · NSA.GOV ↗