Numberline's Enhanced and Extended Zero Trust Maturity Model
The CISA Zero Trust Maturity Model (ZTMM) is a valuable resource for organizations looking to implement Zero Trust principles. It provides a clear framework for assessing maturity levels across its five key pillars: Identity, Devices, Networks, Applications and Workloads, and Data. However, while the CISA ZTMM provides a solid foundation, it does have limitations, particularly when applied to the private sector.
Drawing on our extensive experience applying the ZTMM across both the private and public sectors, we created a clearer, more comprehensive, more objective, and more broadly applicable model.
ZTMM+ improves upon the CISA model by:
Defining each Pillar Function
Clarifying Maturity Levels
Adding New Functions
Creating a Structured Process for Maturity Assessments, with supporting artifacts
This Self-Assessment kit includes:
Full ZTMM+ maturity model
Self-Assessment Guide: Detailed PDF with instructions and screenshots
Interactive Excel spreadsheet for documenting and scoring your enterprise
20-minute video training guide to ensure your readiness to perform an effective assessment
Presentations to guide you and your audience through the self-assessment sessions
Want to learn more before purchasing? Contact us: info@NumberlineSecurity.com
Note: This kit is licensed for internal enterprise usage only. For consultant usage with external clients, please contact us for licensing terms.
This ZIP file contains 14 files:
Self-Service Guide PDF
Interactive Excel Spreadsheet with the ZTMM+ Model
Session Presentations (PDF and PowerPoint format, for each of the 5 Pillars and Cross-Cutting Capabilities)
(version 1.2.0)