Final zero trust strategy both prescriptive, flexible enough to achieve end goals

That push from OMB on not just identity, but driving protections to the application layer is another key change in the final strategy. OMB released the draft strategy in September and asked for industry and agency feedback.

Matt McFadden, the vice president of cyber, the lead for the cyber center of excellence and zero trust accelerator initiative for GDIT, said the final strategy clarified OMB and CISA’s intentions and actions needed to achieve zero trust.