Nimble
CybersecurityCritical Infrastructure

CISA Zero Trust Maturity Model 2.0

cisa.zero-trust.maturity@2.0.0

Pillars, functions and maturity stages as an assessable model.

publishedUS-GOV-PD Verified publisher 1,290 installs

Content is not redistributed by the Marketplace

This package provides mappings, metadata and integration scaffolding only. Obtain the underlying content directly from CISA under its own licence.

Go to source

Overview

Structures the five ZTMM pillars and cross-cutting capabilities so a twin can score current maturity from real configuration and telemetry evidence.

What's inside

rules

  • maturity-scoring.ttl

ontology

  • ztmm.ttl

documentation

  • README.md

Artifact types

Ontology· OntologiesInference Rules· Rules & Reasoning

Dependencies

Version history

  • v2.0.0latestNimble ≥ 1.0.08/29/2026

    Current release.

  • v0.9.0Nimble ≥ 1.0.01/31/2026

    Initial public preview.

Manifest

Nimble consumes this machine-readable manifest when resolving and installing the package.

{
  "package": {
    "id": "cisa.zero-trust.maturity",
    "name": "CISA Zero Trust Maturity Model 2.0",
    "version": "2.0.0",
    "status": "published"
  },
  "publisher": {
    "name": "CISA",
    "type": "government"
  },
  "domains": [
    "cybersecurity",
    "critical-infrastructure"
  ],
  "solution_areas": [
    "zero-trust",
    "security-architecture",
    "infrastructure-cybersecurity"
  ],
  "artifacts": [
    "ontology",
    "inference-rules"
  ],
  "dependencies": [
    {
      "id": "nimble.cyber.core",
      "version": ">=1.0.0",
      "optional": false
    }
  ],
  "compatibility": {
    "nimble": {
      "minimum": "1.0.0",
      "maximum": null
    }
  },
  "license": {
    "type": "US-GOV-PD",
    "name": "U.S. Government Work / Public Domain",
    "url": "https://www.usa.gov/government-works",
    "redistribution": "bundled",
    "attribution_required": true,
    "attribution": "CISA Zero Trust Maturity Model, U.S. Government work.",
    "source_authority": "CISA",
    "source_url": "https://www.cisa.gov/zero-trust-maturity-model"
  },
  "validation": {
    "security": "scanned",
    "validation": "validated"
  },
  "contents": {
    "rules": [
      "maturity-scoring.ttl"
    ],
    "ontology": [
      "ztmm.ttl"
    ],
    "documentation": [
      "README.md"
    ]
  },
  "distribution": {
    "available": false,
    "reason": "bundled"
  }
}