CISA Zero Trust Maturity Model
Devices Pillar

CISA Zero Trust Maturity Model ZTMM-DEV-2: Device Compliance and Posture

What does ZTMM-DEV-2 require?

Verify device compliance and posture (patch level, encryption, EDR) before granting access; continuously re-evaluate.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Devices Pillar

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll CISA Zero Trust Maturity Model controls