What's inside
- NIST SP 800-207's seven tenets, each with your current state, evidence, owner and next step.
- The five pillars and three cross-cutting themes of CISA's maturity model, with current and target state and the gap between them.
- NIST's three access-decision components, and which product or team fills each today.
- An inventory of what users reach through the VPN: protocol, users, managed or unmanaged devices, and whether each needs agent or agentless access.
- ZTNA scoring on six capability domains with starting weights from the CIOPages Buyer Guide, for up to four vendors.
- Twelve questions to put to each ZTNA vendor.
Format: PDF (3 pages) and Excel workbook.
How to use it
Use it to set the order of a zero trust program and to run a VPN replacement shortlist. The Excel version calculates the gaps and scores; the PDF is for working on paper.
Get the worksheet
It is free. We email the download link to your work address.