Software Engineering Institute

The Software Engineering Institute (SEI) hosted a Zero Trust Industry Day to collect information from those who develop solutions for implementing a zero trust architecture. Zero trust solution developers contributed ideas, solutions, and experiences to help government agencies form a zero trust implementation that meets their mission goals, budget, and time frame.

The SEI Zero Trust Industry Day was a request for information (RFI) exercise. This two-day exercise was held in a hybrid environment at the SEI on August 30-31, 2022. It focused on how agencies can comply with the guidance in the following Office of Management and Budget (OMB) memoranda:

• M-22-09—Moving the U.S. Government Toward Zero Trust Cybersecurity Principles
• M-21-31—Improving the Federal Government’s Investigative and Remediation Capabilities Related to Cybersecurity Incidents 

The following external publications are related to zero trust and may be of interest; SEI publications related to SEI Zero Trust Industry Day 2022 are listed in the next section.

• CISA Trusted Internet Connection (TIC) 3.0
• CISA Zero Trust Maturity Model 
• Department of Defense (DoD) Zero Trust Reference Architecture 
• Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems (National Institute of Standards and Technology [NIST] SP 800-160, Volume 1)
• Developing Cyber-Resilient Systems: A Systems Security Engineering Approach (NIST SP 800-160, Volume 2, Revision 1)
• Implementing a Zero Trust Architecture (NIST SP 1800-35)
  • Volume A: Executive Summary
  • Volume B: Approach, Architecture, and Security Characteristics
• Zero Trust Architecture (NIST SP 800-207)