Zero Trust Maturity Assessment With OSCAL
summary
Automated conversion of raw compliance-operator output into OSCAL controls lets a pipeline map NIST 853 catalog entries to five zero trust pillars and generate assessment plans via comply-time and complyscribe. A summer intern’s Zero Trust Visualization app ingests OSCAL assessments, shows pass/fail per control, highlights partly implemented controls, and ranks fixes by impact — fixing one misconfiguration moves 18 controls from fail to pass in the demo — the app runs and recommends the smallest changes that raise overall maturity.
AI-written summary · about
chapters (10)
- 0:00Zero Trust and OSCAL intro
- 1:04Zero Trust architecture
- 3:50Zero Trust maturity journey
- 5:57Automating assessment with OSCAL
- 8:25What is OSCAL
- 12:19NIST 803 controls
- 15:06Demo: Zero Trust visualization
- 19:48Future of Zero Trust assessment
- 24:29Call to action
- 25:22Q&A
related talks
07mZero Trust Visualization
40mAutomating Security and Compliance via a new standard-of-standards
37mPath To Production: Sustainable Compliance In Strict Environments
08mTrestle Compliance Collab Platform OS Project + NIST Compliance as Code OSCAL Standard
22mOSCAL in Action: Real World Examples of Automating Policy & Comp...
43m12 Essential Requirements for Policy Enforcement and Governance with OSCAL
34mZero Trust Best Practices in Government and Federal Industries
42mImplementing Zero Trust in Government Settings: Strategies, Challenges, and Best Pra...