Leitlinie / Rahmenwerk / Norm

Zero-Trust-Architektur (NIST SP 800-207)

In Kraft seit 11. August 2020Eintrag am 2. November 2026 anhand der amtlichen Quelle geprüft · Methodik

Zero Trust · ZTA · NIST SP 800-207 · NISTSP800-207

It is the most cited reference for the zero trust model: no user, device or network is considered trustworthy just because it is “inside” the corporate perimeter. Every access to a resource must be authenticated, authorised and evaluated each time, based on identity, device state and context. The guide describes the principles, the logical components (policy engine and policy enforcement point), possible deployment models and use cases, such as remote work and cloud, as well as threats specific to these architectures and the migration path.

Amtliche Quelle: https://csrc.nist.gov/pubs/sp/800/207/final

Amtliche Nummer

NIST SP 800-207

Datum der Annahme

11. August 2020

National Institute of Standards and Technology (NIST). (2020). Zero Trust Architecture (NIST SP 800-207) (NIST SP 800-207). https://csrc.nist.gov/pubs/sp/800/207/final

National Institute of Standards and Technology (NIST). "Zero Trust Architecture (NIST SP 800-207)." 11 August 2020. https://csrc.nist.gov/pubs/sp/800/207/final.

@misc{us_nist_sp_800_207_zero_trust_2020,
  author       = {{National Institute of Standards and Technology (NIST)}},
  title        = {{Zero Trust Architecture (NIST SP 800-207)}},
  year         = {2020},
  note         = {NIST SP 800-207},
  url          = {https://csrc.nist.gov/pubs/sp/800/207/final},
  urldate      = {2026-11-02}
}