CSA CCZT case studies
CSA CCZT · Put your knowledge to work in context.
The Certificate of Competence in Zero Trust (CCZT) is a vendor-neutral Zero Trust training and certificate program from the Cloud Security Alliance. CSA describes it as built on foundational Zero Trust components released by CISA and NIST, CSA Research work on the Software Defined Perimeter, and guidance from Zero Trust experts including John Kindervag, credited as the founder of the Zero Trust philosophy. The CSA CCZT case studies are 5 cases and about 3,821 words.
1Resetting an 18-Month Zero Trust Plan at a Mid-Sized Bank
Northbridge Financial is a 2,400-employee bank with 1,400 remote workers, 14 business units, three data centers, and 22 line-of-business applications that predate its current identity provider. Peak VPN utilization is 85%, the internal network is a flat /16, and no complete device inventory exists.
790 words, about 4 min2Choosing and Integrating SDP for Production Admin Access
Helio SaaS runs a 300-engineer product organization across AWS and Azure and uses 40 contractors for release engineering. Production administration currently happens through a VPN concentrator into 10.0.0.0/8 with split tunneling; there is no device posture check, and contractors receive 90-day VPN accounts.
770 words, about 4 min3Restarting Microsegmentation After a Clinical Network Outage
Mercy Valley Health is a 12,000-staff hospital system with 8,000 medical devices, 45 sites, 300 applications, and a single EHR vendor. After a ransomware incident, the security team launched a microsegmentation pilot in one data center covering 200 servers.
727 words, about 4 min4Testing a Zero Trust Appliance Claim Against NIST and CISA
A state benefits agency serves 5,000 employees and 2.5 million residents. About 60% of workloads remain on-premises, 20% are in one cloud, and the rest are SaaS.
738 words, about 4 min5Designing Policy Enforcement for Legacy OT in Manufacturing
Arcadia Manufacturing operates 25 plants, employs 9,000 people, and runs 3,000 OT devices including PLCs, HMIs, historians, and safety systems. IT and OT networks are converging after an acquisition, and vendor engineers remotely support line controllers.
796 words, about 4 min