# CISA Zero Trust Maturity Model

**Canonical:** https://apis.io/apis/zero-trust-security-model/cisa-zero-trust-maturity-model/  
**Provider:** Zero-Trust Security Model — https://apis.io/providers/zero-trust-security-model/  
**Documentation:** https://www.cisa.gov/zero-trust-maturity-model

CISA Zero Trust Maturity Model is one of 5 APIs that [Zero-Trust Security Model](https://apis.io/providers/zero-trust-security-model/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include CISA, Federal, and Maturity Model. The published artifact set on APIs.io includes API documentation and an API reference.

CISA's Zero Trust Maturity Model defines four maturity levels (Traditional, Initial, Advanced, Optimal) across five pillars (Identity, Devices, Networks, Applications & Workloads, Data) and three cross-cutting capabilities (Visibility & Analytics, Automation & Orchestration, Governance). It is the federal-civilian roadmap for Zero Trust adoption.

## Machine-readable artifacts (2)

- **Documentation** — https://www.cisa.gov/zero-trust-maturity-model
- **APIReference** — https://www.cisa.gov/sites/default/files/2023-04/zero_trust_maturity_model_v2_508.pdf

## Other Zero-Trust Security Model APIs (4)

- [NIST SP 800-207 Zero Trust Architecture](https://apis.io/apis/zero-trust-security-model/nist-sp-800-207/)
- [DoD Zero Trust Reference Architecture](https://apis.io/apis/zero-trust-security-model/dod-zero-trust-reference-architecture/)
- [NSA Zero Trust Guidance](https://apis.io/apis/zero-trust-security-model/nsa-zero-trust-guidance/)
- [UK NCSC Zero Trust Architecture Design Principles](https://apis.io/apis/zero-trust-security-model/ncsc-zero-trust-principles/)

## Tags

CISA, Federal, Maturity Model

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/zero-trust-security-model/cisa-zero-trust-maturity-model/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/zero-trust-security-model/.