---
title: "Zero Trust"
canonical: "https://codeandcypher.com/tags/zero-trust/"
---

# Zero Trust



## Index

- [Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDF](/series/acuity-health-security-architecture/part-2-architecting-zero-trust-devsecops/index.md) (2026-09-15): Operationalize NIST SP 800-218 (SSDF) and Zero Trust Architecture across cloud-native development environments, ephemeral CI/CD pipelines, and supply chains.

- [Acuity Health: Part 1 — Securing the 2 AM Urgent Care (Zero Trust for Distributed Clinics)](/series/acuity-health-security-architecture/part-1-enterprise-security-architecture/index.md) (2026-09-08): Secure decentralized urgent care clinics with a lean IT team using port-level dynamic VLANs, gloved-hand MFA, EDR micro-isolation, and immutable WORM backups.

- [Acuity Health Enterprise Security Architecture: Hotwash Synthesis](/papers/acuity-health-enterprise-architecture-hotwash-synthesis/index.md) (2026-08-10): Executive synthesis and architectural hotwash of the Acuity Health enterprise security transformation, mapping Zero Trust and NIST governance frameworks.

- [Enterprise Healthcare Security Architecture: The Acuity Health Blueprint](/papers/enterprise-healthcare-security-architecture/index.md) (2026-06-29): Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.

- [Quantum-Ready Risk Management Plan: Post-Quantum Cryptography Migration Strategy](/papers/csol530-quantum-ready-risk-management-plan/index.md) (2025-06-22): Strategic risk management roadmap for transitioning enterprise cryptography to post-quantum standards before cryptanalytic breakthroughs.

- [Automating AI Security Risk Assessment, LLM Governance, and Threat Detection](/papers/csol530-automating-ai-security-risks/index.md) (2025-06-15): Framework for identifying and mitigating AI security risks, prompt injection vectors, and automated model evaluation pipelines.

- [Cybersecurity Governance Frameworks, Regulatory Compliance, and Maturity Auditing](/papers/csol530-cybersecurity-governance-and-compliance/index.md) (2025-06-04): Governance framework analyzing policy hierarchies, compliance mapping, and audit readiness across regulated enterprise environments.

- [Designing Robust Security Controls for Cloud and IoT Ecosystems](/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/index.md) (2025-06-02): Security architecture blueprint specifying robust isolation controls, mutual TLS, and device attestation for cloud and IoT ecosystems.

- [Designing a Zero Trust Strategy for Third-Party and Vendor Risk Management](/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/index.md) (2025-05-26): Zero Trust architecture blueprint enforcing dynamic context-based access and least privilege for third-party vendors and contractors.

- [Enterprise Risk Analysis Report: Quantitative and Qualitative Risk Assessment](/papers/csol530-creating-a-risk-analysis-report/index.md) (2025-05-17): Methodology for synthesizing technical vulnerability data into executive-ready risk analysis reports with actionable remediation roadmaps.

- [Fundamentals of Cyber Governance: Alignment, Oversight, and Policy Enactment](/papers/csol530-fundamentals-of-cyber-governance/index.md) (2025-05-11): Foundations of cybersecurity governance, board oversight, risk appetite formulation, and regulatory accountability structures.