DoD Zero Trust Reference Architecture

The DoD Zero Trust Reference Architecture is a prescriptive architecture to enable the DoD to secure and defend their information and OT systems within the JIE and DoDIN, including defense critical infrastructure (DCI) against malicious cyber activity including advanced attacks. The goals are to detect, deter, deny, defend and recover from malicious cyber activity and to have a scalable, resilient, auditable and defendable framework that can be used across DoD DCI, data, applications, assets and services (DAAS). Rolled out in phases, it begins with 91 Target levels for adoption by 30 September 2027, and is followed by Advanced levels that DoD branches must meet.