zero-trust-assessment

Evaluate Zero Trust Architecture maturity across CISA ZTMM v2 pillars using NIST SP 800-207 tenets.

44|128|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/UnitOneAI/SecuritySkills --skill zero-trust-assessment-unitoneai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: zero-trust-assessment
Source: https://github.com/UnitOneAI/SecuritySkills/tree/main/skills/identity/zero-trust-assessment
Command: npx skills add https://github.com/UnitOneAI/SecuritySkills --skill zero-trust-assessment-unitoneai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Produces an actionable Zero Trust Architecture maturity assessment that maps an organization’s current state to verifiable NIST SP 800-207 tenets and the CISA Zero Trust Maturity Model v2 pillars, rather than generating vague security advice.

Core Features & Use Cases

  • Pillar-by-pillar maturity scoring: Evaluates Identity, Devices, Networks, Applications & Workloads, and Data using Traditional/Initial/Advanced/Optimal stages.
  • Criteria-driven gap analysis: Identifies concrete “what to look for” indicators (e.g., continuous verification, microsegmentation readiness, DLP coverage) and ties them to NIST/CISA expectations.
  • Remediation roadmap structure: Outputs an executive-ready scorecard and an organized summary that can be used to plan investment priorities and phased improvements.

Quick Start

Ask the AI to run a Zero Trust maturity assessment for your organization scope and return a pillar scorecard with the top gaps and a recommended remediation roadmap.

Frequently Asked Questions about zero-trust-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a Zero Trust maturity assessment and how does it map to NIST SP 800-207?

A Zero Trust maturity assessment evaluates an organization's architecture by mapping current identity, device, network, application, and data controls against NIST SP 800-207 tenets and CISA ZTMM v2 pillars to produce a verifiable scorecard.

How do I score my organization's Zero Trust architecture readiness across CISA pillars?

You score readiness by evaluating Identity, Devices, Networks, Applications & Workloads, and Data controls against Traditional, Initial, Advanced, and Optimal maturity stages, generating an evidence-driven gap analysis and remediation roadmap.

Can I use a CISA ZTMM v2 assessment for microsegmentation and continuous verification planning?

Yes, a CISA ZTMM v2 assessment explicitly evaluates continuous verification mechanisms and microsegmentation readiness across network and device pillars to guide your security roadmap and phased investment priorities.

What's the best way to build a Zero Trust remediation roadmap for security leadership?

The best way is generating an executive-ready pillar scorecard that identifies concrete criteria-driven gaps tied to NIST expectations, allowing leadership to prioritize phased improvements and investments effectively.

Does a Zero Trust maturity scorecard require specific input data for enterprise readiness reviews?

Zero Trust maturity scorecards require scoped organizational context regarding current identity, device, network, application, and data controls to accurately evaluate evidence against NIST and CISA maturity criteria.