Audit of NASA’s Zero Trust Architecture

Zero trust architecture (ZTA) is a cybersecurity approach based on continual verification of each user, device, application, and transaction to protect critical systems and data. NASA has made progress implementing ZTA across its corporate systems (managed by the Office of the Chief Information Officer). However, by delaying ZTA implementation of non-corporate (mission and Jet Propulsion Laboratory) systems, the Agency is missing an opportunity to address enterprise-wide issues that will impact ZTA adoption within the non-corporate environment.