Standards are formally developed documents that define agreed-upon requirements, controls, or best practices to ensure a consistent and measurable level of security across organizations. Unlike laws and regulations, standards are generally voluntary unless incorporated into contracts or referenced by legislation, but they often serve as benchmarks for certification, audit, and due diligence. For example, ISO/IEC 27001 specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS), while ISO/IEC 27002 provides detailed guidance on selecting and implementing security controls. Standards are typically consensus-based and internationally recognized, offering structured, auditable criteria that help organizations demonstrate maturity, comparability, and trustworthiness in their cybersecurity practices.
The CSA’s paper “Agentic AI Identity and Access Management: A New Approach” addresses the inadequacy of traditional IAM systems when applied to autonomous, dynamic agentic AI systems operating in multi-agent… Read More »CSA Agentic AI Identity and Access Management
NIST Special Publication 800-63-4, Digital Identity Guidelines, provides comprehensive process and technical requirements for managing digital identity assurance levels in identity proofing, authentication, and federation. These guidelines address modern digital… Read More »NIST SP 800-63-4 Digital Identity Guidelines
NIST Special Publication 1800-35, “Implementing a Zero Trust Architecture,” provides a comprehensive guide developed by the National Cybersecurity Center of Excellence (NCCoE) in collaboration with 24 industry vendors. It demonstrates… Read More »NIST SP 1800-35 Implementing a Zero Trust Architecture
The ANSSI document “Recommandations pour l’administration sécurisée des SI reposant sur Active Directory” provides comprehensive guidance to secure information systems (SI) that rely on Microsoft’s Active Directory (AD). It emphasizes… Read More »ANSSI Recommendations for Secure Administration of AD-based IS (FRENCH)
The Zero Trust Maturity Questionnaire is designed to help organizations evaluate their current level of Zero Trust implementation across key security domains. It assesses maturity in areas such as identities,… Read More »MicroSoft Zero Trust Maturity Questionnaire
The CISA Zero Trust Maturity Model (ZTMM) is a comprehensive framework designed to guide organizations, particularly federal agencies, in transitioning from traditional perimeter-based security to a zero trust architecture, which… Read More »CISA Zero Trust Maturity Model
The ANSSI guide “Recommandations relatives à l’authentification multifacteur et aux mots de passe” provides comprehensive security recommendations focused on authentication methods. It strongly advocates for the use of multifactor authentication… Read More »ANSSI Recommendations for Multi-Factor Authentication and Passwords ★★★★★
NIST SP 800-207, titled “Zero Trust Architecture,” is a comprehensive guidance document from the National Institute of Standards and Technology that outlines the principles, components, and strategies for implementing Zero… Read More »NIST SP 800-207 Zero Trust Architecture
The Cloud Security Alliance (CSA), recognized as a pioneer in the field of Zero Trust, has developed the CSA Zero Trust Library as a comprehensive resource hub to guide organizations… Read More »CSA Zero Trust Standard Library