Linea guida / framework / standard

Architettura zero trust (NIST SP 800-207)

In vigore dal 11 agosto 2020Scheda verificata sulla fonte ufficiale il 2 novembre 2026 · Metodologia

Zero Trust · ZTA · NIST SP 800-207 · NISTSP800-207

It is the most cited reference for the zero trust model: no user, device or network is considered trustworthy just because it is “inside” the corporate perimeter. Every access to a resource must be authenticated, authorised and evaluated each time, based on identity, device state and context. The guide describes the principles, the logical components (policy engine and policy enforcement point), possible deployment models and use cases, such as remote work and cloud, as well as threats specific to these architectures and the migration path.

Fonte ufficiale: https://csrc.nist.gov/pubs/sp/800/207/final

Numero ufficiale

NIST SP 800-207

Data di adozione

11 agosto 2020

National Institute of Standards and Technology (NIST). (2020). Zero Trust Architecture (NIST SP 800-207) (NIST SP 800-207). https://csrc.nist.gov/pubs/sp/800/207/final

National Institute of Standards and Technology (NIST). "Zero Trust Architecture (NIST SP 800-207)." 11 August 2020. https://csrc.nist.gov/pubs/sp/800/207/final.

@misc{us_nist_sp_800_207_zero_trust_2020,
  author       = {{National Institute of Standards and Technology (NIST)}},
  title        = {{Zero Trust Architecture (NIST SP 800-207)}},
  year         = {2020},
  note         = {NIST SP 800-207},
  url          = {https://csrc.nist.gov/pubs/sp/800/207/final},
  urldate      = {2026-11-02}
}