National public-sector agencyPublic sector
Sequencing a Zero Trust program for public services
Multiple legacy directories, broad network trust, and decentralized application ownership prevented the agency from converting Zero Trust principles into an executable program.
Control route
01
Identified priority public services, sensitive data flows, and administrative paths.
02
Assessed maturity across identity, device, network, application, and data controls.
03
Built dependency-aware workstreams with governance, investment gates, and measurable outcomes.
A three-horizon roadmap connected policy goals to specific control changes without requiring a disruptive platform replacement.
Control initiatives
27
initiatives sequenced across three delivery horizons.
Priority services
9
services used to anchor risk decisions.