Citation Audit

Citation: Continuously improve and evolve due to changes in threat landscape, mission, technology, and regulations ¶ 3 – As input to this ongoing process of validation and improvement, organizations should continuously monitor their network and other infrastructure and update policies, technologies, and network segmentation topologies to ensure that they remain effective. Creating a ZTA is not a one-time project but an ongoing process. The organization's CISO or other security team members should perform ongoing validation of their ZTA access policies to ensure that they continue to be defined in a manner that supports the organization's mission and business use cases while conforming with the principles of least privilege and separation of duties.

Control: CC ID 512 – Establish, implement, and maintain access control policies.