Correct Answer:
B
When preparing to implement ZTA, some changes may be required in the organization’s governance,
compliance, risk management, and operations.These components are essential for ensuring a
successful implementation of ZTA, as they involve the following aspects12:
Governance: This refers to the establishment of a clear vision, strategy, and roadmap for ZTA, as well
as the definition of roles, responsibilities, and authorities for ZTA stakeholders. Governance also
involves the alignment of ZTA with the organization’s mission, goals, and objectives, and the
communication and collaboration among ZTA teams and other business units.
Compliance: This refers to the adherence to the relevant laws, regulations, standards, and policies
that apply to the organization’s ZTA. Compliance also involves the identification and mitigation of any
legal or contractual risks or issues that may arise from ZTA implementation, such as data privacy,
security, and sovereignty.
Risk management: This refers to the assessment and management of the risks associated with ZTA
implementation, such as technical, operational, financial, or reputational risks. Risk management
also involves the development and implementation of risk mitigation strategies, controls, and
metrics, as well as the monitoring and reporting of risk status and performance.
Operations: This refers to the execution and maintenance of the ZTA processes, technologies, and
services, as well as the integration and interoperability of ZTA with the existing IT infrastructure and
systems. Operations also involve the optimization and improvement of ZTA efficiency and
effectiveness, as well as the resolution of any operational issues or incidents.
Reference=
Zero Trust Architecture: Governance
Zero Trust Architecture: Acquisition and Adoption
