[non-validated] Verified ZTNA Implementation for Remote Access

Generated catalog draft. No operational assessment or human approval is claimed.

[non-validated] This question has unresolved selected work.

Question

[non-validated] Has remote access been implemented using Zero Trust Network Access (ZTNA) with granular access control policies based on explicit authentication and authorization?

Explanation

[non-validated] Has the service provider implemented remote access using Zero Trust Network Access (ZTNA) with explicitly defined authentication and authorization policies enforcing granular access controls for external connections during the evidence period? Verification requires documented implementation meeting CISA 2024 guidance; missing evidence remains pending review.

Criterion and evidence

Validates ZTNA architecture implementation (evidence period: current assessment) for remote access systems per source 5 p1. Acceptable alternatives include SSE/SASE solutions with equivalent granular controls. Evidence must demonstrate explicit authentication/authorization policies; pending review status applies to missing documentation.

AI assistance prompt

Replace this placeholder with one clear yes/no condition within the scope of Networking and VPNs. Define the evidence rule and keep the question within 512 characters. Do not invent an assessment outcome.

Clarifications

What constitutes sufficient evidence for compliance?

Official implementation documentation showing ZTNA architecture with policy examples demonstrating user-role-based access controls (source 5 p1). Legacy VPN configurations without explicit authorization mechanisms do not satisfy this criterion.

How are missing evidence cases handled?

Absence of required architectural documentation results in 'pending evidence review' status. Partial implementations or temporary failures do not constitute compliance without demonstrated adherence to explicit authorization principles per source 5 p1.

References

Joint Guide: Modern Approaches to Secure Network Access Security

https://www.cisa.gov/sites/default/files/2024-06/joint-guide-modern-approaches-to-secure-network-access-security-508c.pdf (opens in a new tab)

AWS Site-to-Site VPN - AWS Documentation

https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html (opens in a new tab)