Summary
Authoring Agencies: The Zero Trust Operational Technologies Security Working Group developed this document. The Working Group is a joint initiative led by the Cybersecurity and Infrastructure Security Agency (CISA), Department of War (DoW), and Department of Energy (DOE)—with the aim of supporting organizations in applying zero trust (ZT) principles to operational technology (OT). The Zero Trust Operational Technologies Security Working Group gratefully acknowledges the contributions of the following participating agencies: Department of State (DOS), Federal Bureau of Investigation (FBI), and the National Institute of Standards and Technology (NIST). Purpose of Document: This paper provides considerations for applying ZT principles to OT systems and environments to system owners, operators, and security personnel. It addresses the unique challenges of transitioning to a ZT architecture within OT, considering technology gaps from legacy infrastructure, operational constraints, and the safety requirements that come from the critical link between cybersecurity and physical processes.