Zero Trust assessment across the software product development lifecycle

Abstract: This paper focuses on the Zero Trust concept as a modern ap-proach to information security. It analyzes existing methods for assessing the implementation of Zero Trust Maturity models, identifying their key features and limitations. The study demon-strates that current approaches have a number of drawbacks that restrict their practical applicability. A Zero Trust assessment framework is proposed, based on the secure software develop-ment lifecycle and identification of factors influencing Zero Trust at each stage. Within the proposed approach, a compre-hensive system of criteria is established to provide a more ob-jective and thorough evaluation of the implementation of Zero Trust principles.

Keywords: software development lifecycle, secure software, assessment cri-teria, zero trust, zero trust assessment