OCIO - Infrastructure - Zero Trust

OCIO - Infrastructure - Zero Trust

Department of the Interior (DOI)

A Zero Trust (ZT) model assumes that breaches do occur and verifies each request as though it originates from an open network. Regardless of where the request originates or what resource it accesses, ZT teaches us to never trust, always verify. Every access request is fully authenticated, authorized, and encrypted before granting access. Comprehensive analytics and intelligence are utilized to detect and respond to anomalies in real time. DOI has developed a ZT Strategy Implementation Plan in response to OMB directive M-22-09; Moving the U.S. Government Toward Zero Trust (ZT) Cybersecurity Principles. In FY 2022, the OCIO along with bureaus and offices, refined initial cost estimates, defined metrics for measuring progress against the DOI Zero Trust Strategy, and developed Zero Trust technical standards. During FY 2023-2024 OCIO is developing the foundation for an advanced stage of ZT implementation by FY25 and a goal of an optimal stage of maturity by FY30.

Standard IT Investments

None

OCIO - Infrastructure - Zero Trust