Software Engineering Institute

In August 2022, the Software Engineering Institute (SEI) at Carnegie Mellon University (CMU) hosted Zero Trust Industry Day 2022 to enable industry stakeholders to share information about implementing zero trust (ZT). At the event, attendees focused on how federal agencies with limited resources can implement a zero trust architecture (ZTA) that adheres to executive orders M-22-009 and M-21-31, both of which address federal cybersecurity measures.

During these discussions, participants identified ZT-related issues that could benefit from additional research. By focusing on these areas, organizations in government, academia, and industry can collaborate to develop solutions that streamline and accelerate ongoing ZTA transformation efforts. In this paper, we discuss some of these potential research areas.