Zero Trust Maturity Assessment
Estimate your Zero Trust maturity across the CISA model's five pillars and two cross-cutting capabilities. Answer 7 questions to see where you sit on the Traditional → Initial → Advanced → Optimal scale.
Framework: CISA Zero Trust Maturity Model 2.0.
How is identity verified and access decided?
Loading…
Sample report · illustrative data
Sample result: Zero Trust maturity read
Example answers across seven areas (each scored 0 to 3) for an organisation that has rolled out strong sign-in but not yet device trust or data classification.
Overall
- Overall score
- 52% (11 of 21 points)
- Rating
- Amber
- Weakest area
- Devices
By area
| Area | Score | Percent | Rating |
|---|---|---|---|
| Identity | 2 / 3 | 67% | Amber |
| Devices | 1 / 3 | 33% | Red |
| Networks | 2 / 3 | 67% | Amber |
| Applications & Workloads | 2 / 3 | 67% | Amber |
| Data | 1 / 3 | 33% | Red |
| Visibility & Analytics | 2 / 3 | 67% | Amber |
| Governance | 1 / 3 | 33% | Red |
How to read it
Green is 80% or more, Amber 50% to 79%, Red below 50%. Start with the weakest area and the Red rows, since access decisions are only as strong as the signals feeding them.
Made-up example data. Your own run uses your inputs. Downloads of the full report need Pro.
Related free assessments
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.