DoD Zero Trust · Reference Architecture · Evidence & Implementation Kit
Reach the DoD Zero Trust target level, without turning the pillars and capabilities into controls yourself.
Every DoD Zero Trust capability handed to you as an adopt-ready control, across the seven pillars and toward the Target and Advanced levels, with the evidence an assessor examines.
Zero-Trust-ready in a weekend, not a quarter.
Here is the honest situation. The DoD requires its components to reach Zero Trust, measured by the seven pillars, User, Device, Application and Workload, Data, Network and Environment, Automation and Orchestration, and Visibility and Analytics, and the dozens of capabilities within them, at a Target level and then an Advanced level on a phased timeline. Building those capabilities, conditional access and MFA, comply-to-connect, data tagging and DLP, micro-segmentation, SOAR and analytics, and evidencing them, is a major program, and a capability short of the target level is exactly where the target is not met.
This Kit removes that translation. It is every DoD Zero Trust capability written as an adopt-ready control you personalize in a weekend, with the evidence an assessor examines.
What you get, the moment you buy
36
Capabilities as adopt-ready controls. Every DoD Zero Trust capability across the seven pillars, from conditional access and comply-to-connect through data tagging, micro-segmentation and SOAR, written so you personalize and apply it toward the target level.
36
Evidence-they-examine checklists. For each control, exactly what an assessor examines, plus where the target level is not met, so you close the gap first.
1
Zero Trust Capability Matrix, pre-built. Every capability in a working spreadsheet, ready to record Target or Advanced level, status and evidence location across the pillars.
1
Gap & Maturity Assessment. Score each capability and the workbook returns your progress toward the target level as a single percentage, and exactly what to advance next.
Grounded in the DoD Zero Trust Reference Architecture and Capability Model, with the seven pillars, the Target and Advanced levels, conditional access and MFA, comply-to-connect, data tagging and DLP, micro-segmentation and SOAR called out. Editable Word and Excel files.
Target level first, then Advanced
DoD Zero Trust is phased: reach the Target level across all seven pillars, then the Advanced level. This Kit tags each capability to a level, so you can prioritise the Target-level work that must land first and see exactly what Advanced adds, rather than trying to do everything at once.
What one control looks like
This is the User pillar user inventory, where DoD Zero Trust begins. All 36 are built to this depth.
DODZT-1 Enterprise user inventory and identity source of truth USER PILLAR
Implement this control
[Component] shall maintain an authoritative enterprise inventory of all users, service accounts, and non-person entities, reconciled against the DoD enterprise ICAM identity source of truth, with attributes for organization, role, clearance, and account status, and shall automatically disable identities that are terminated, expired, or unreconciled within defined service level thresholds.
Capability note.
Aligns to User pillar Target Level user inventory capability and the enterprise ICAM integration requirement.
Evidence an assessor examines
- Enterprise ICAM identity inventory export with reconciliation timestamps
- Joiner-mover-leaver workflow records tied to account enable and disable events
- Reconciliation exception report listing orphaned and unmatched accounts
- Service account and non-person entity register with assigned owners
Common finding they raise: Non-person entities and legacy service accounts often live outside the enterprise ICAM source of truth and are reconciled manually or not at all.
Why this is not another template pack
- The evidence is the point. A capability you cannot evidence does not meet the level. This tells you what an assessor examines and where the target level is not met, for every pillar.
- The seven pillars and levels built in. The seven pillars and the Target and Advanced levels are written into the controls, so you measure and advance the way the DoD model requires.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. The DoD model builds on NIST 800-207 Zero Trust and the CISA ZTMM, and integrates ICAM and comply-to-connect, so this feeds your wider security program.
Who buys this
DoD components and defense organizations and the contractors serving them, and the security and Zero Trust leads who own the program. Whether it is a first initiative or a target-level push, you save weeks and walk in with the pillars and evidence structured.
By the end of the weekend you will have
✓ An adopt-ready control for all 36 capabilities
✓ A completed Zero Trust capability matrix
✓ The evidence an assessor examines
✓ Your pillar capabilities and target levels defined
✓ A maturity percentage and an advancement plan
✓ The gaps to the target level closed
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
What are the seven pillars? User, Device, Application and Workload, Data, Network and Environment, Automation and Orchestration, and Visibility and Analytics. Each is built as controls.
What are the levels? Target Level Zero Trust and Advanced Zero Trust, on a phased timeline. The Kit tags each capability to a level.
How does it relate to NIST 800-207? The DoD model builds on NIST 800-207 and the CISA ZTMM. The controls carry across.
What if it is not for me? A 30-day money-back guarantee.
Do not chase every pillar at once.
Every DoD Zero Trust capability is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and reach the target level this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
