top of page
Zero Trust.
Executed in the Right Order.
CISA ZTMM User Pillar: Building Dynamic Privilege Rules for OMB M-22-09 Identity Requirements
Most civilian agencies still have a privilege problem hiding inside normal operations: static Active Directory groups, standing administrator roles, VPN-era access assumptions, and quarterly access reviews that do not respond to user risk in the moment. That model does not hold up against the CISA ZTMM User Pillar or the identity direction in OMB M-22-09. Explore how conditional user access has to move from policy language into enforceable rules.
2 days ago7 min read
DTM 25-003 Dynamic Privilege Controls: How DoD Programs Should Implement Periodic Authentication Rules
Explore the intricacies of DTM 25-003 and how DoD programs should implement periodic authentication rules. Explore how DTM 25-003 requires deciding, in near real time, whether that user should keep the same privileges after the mission, device, behavior, or risk context changes.
5 days ago6 min read
bottom of page