Zero › Module 9 › Lesson 2
KPIs Named
ZT maturity model literacy — CISA Zero Trust Maturity Model, NIST tiers — maturity assessment stub on YOUR $ZT_LAB.
Visual · t40_maturity_named
ZT maturity named. $ZT_LAB. Original Cyberlium.
Opening
Maturity models score pillars — place LAB-ZT-001 honestly per pillar: traditional, initial, advanced, optimal literacy bands.
CISA ZTMM: Identity, Devices, Networks, Apps & Workloads, Data, Visibility & Analytics, Automation & Orchestration pillars with maturity stages literacy. NIST CSF tiers cross-reference optional. Assessment stub: pillar | current stage | target stage | gap note — fictional honest scores, not all optimal. Next: KPIs Metrics.
1. Maturity stages (named)
Traditional: manual, perimeter-heavy. Initial: some automation. Advanced: integrated signals. Optimal: fully dynamic least privilege literacy.
Honest current state beats aspirational all-optimal slide fiction.
Command guide
Try these commands — Maturity stages (named)
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
CISA Zero Trust Maturity Model — https://www.cisa.gov/zero-trust-maturity-model NIST SP 800-207 — https://csrc.nist.gov/publications/detail/sp/800-207/final
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
export ZT_LAB=${ZT_LAB:-$HOME/cyberlium-lab/t40-zt}
export ZT_ROADMAP=${ZT_ROADMAP:-$ZT_LAB/LAB-ZT-001/roadmap}
curl -sS https://www.cisa.gov/zero-trust-maturity-model | head -10
cat > "$ZT_ROADMAP/maturity-assessment-stub.md" <<'EOF'
# ZT Maturity Assessment — LAB-ZT-001 (honest fictional)
| Pillar | Current | Target | Gap note |
|--------|---------|--------|----------|
| Identity | Initial | Advanced | CA policies partial |
| Devices | Traditional | Advanced | MDM not 100% |
| Networks | Initial | Advanced | ZTNA pilot only |
| Apps & Workloads | Initial | Advanced | Legacy ERP on VPN |
| Data | Traditional | Advanced | Labels incomplete |
| Visibility & Analytics | Initial | Advanced | SIEM tuning |
| Automation | Traditional | Initial | Manual policy changes |
Stages: Traditional → Initial → Advanced → Optimal (CISA ZTMM literacy)
LAB SAMPLE — NOT FOR PRODUCTION ARCHITECTURE CLAIMS
EOFCommand — copy this
grep -E 'Pillar|Traditional|Advanced|Gap note|LAB SAMPLE' "$ZT_ROADMAP/maturity-assessment-stub.md"
Primary tools to practice this lesson: curl, grep. Reference sites: CISA Zero Trust Maturity Model (https://www.cisa.gov/zero-trust-maturity-model); NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. CISA pillar map
Map Topic 40 modules to CISA pillars for assessment row labels.
Cross-walk to YOUR pillar packs as evidence references.
3. Assessment stub
Seven pillar rows with current/target stage and one gap sentence each.
Ship: maturity assessment stub. Next: KPIs Metrics.
4. What you ship: maturity assessment stub
Seven pillars with current/target stages and gap notes. Honest scores. chmod 600.
5. What you record before the next lesson
Date. Maturity stub. $ZT_LAB named. File t40-m09-l02-maturity-named.txt chmod 600.
6. Wrong vs right: bypass cookbooks vs YOUR ZT design
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Mark every pillar Optimal in lab. Claim CISA certified your fictional org.
Right
Write honest maturity assessment with two Traditional/Initial rows. Next: KPIs Metrics.
Mission: maturity assessment
1) Name four maturity stages. 2) Score seven pillars current vs target. 3) One gap note per pillar. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Gap notes become roadmap M9 L1 milestones — keep consistent IDs.
Knowledge Check
APPLY: Maturity assessment should be:
Multiple choice
Knowledge Check
APPLY: True or False: CISA ZTMM covers identity and device pillars.
True or False
Knowledge Check
APPLY: Fake ZT maturity certification:
Multiple choice