I85PREP
⌘ K
CSA CCZT study materials
CSA CCZT study resources

CSA CCZT study plan

CSA CCZT · Give each week a clear focus.

8 weeks · About 6 hours per week

Week 1

Zero Trust Architecture & Zero Trust Foundational Concepts

  • Define zero trust and list the seven tenets from NIST SP 800-207

  • Differentiate zero trust architecture from perimeter-based security models

  • Identify the core components of ZTA: policy engine, policy administrator, policy enforcement point

  • Explain the role of identity, device, network, application, and data pillars in zero trust

  • Map each CSA CCZT domain to its weight and key concepts

Your checkpoint

Create a one-page concept map linking ZTA components, tenets, and pillars, with a short explanation of each.

Week 2

Zero Trust Architecture & Zero Trust Foundational Concepts

  • Compare and contrast ZTA deployment models: device-centric, network-centric, and identity-centric

  • Describe the trust algorithm and how it uses input factors to grant access

  • Explain the concept of a software-defined perimeter (SDP) at a high level

  • List common zero trust threats and how ZTA mitigates them

  • Summarize the limitations and challenges of implementing ZTA

Your checkpoint

Write a 500-word summary comparing two ZTA deployment models, including pros, cons, and a use case for each.

Week 3

Software Defined Perimeter & Zero Trust Foundational Concepts

  • Define SDP and its three main components: controller, gateway, and client

  • Explain the SDP architecture and the single packet authorization (SPA) mechanism

  • Describe how SDP enables zero trust network access (ZTNA)

  • Differentiate SDP from VPN and traditional network access

  • Identify SDP use cases and benefits in cloud and hybrid environments

Your checkpoint

Draw an SDP architecture diagram with controller, gateway, and client, and annotate the SPA handshake steps.

Week 4

Zero Trust Strategy & Zero Trust Planning

  • Outline the steps to develop a zero trust strategy aligned with business objectives

  • Identify key stakeholders and their roles in a zero trust initiative

  • Conduct a maturity assessment using a zero trust maturity model

  • Define measurable success metrics and KPIs for zero trust adoption

  • Create a high-level roadmap for zero trust implementation

Your checkpoint

Produce a zero trust strategy document (1-2 pages) including goals, stakeholders, maturity baseline, and a 12-month roadmap.

Week 5

Zero Trust Planning & Zero Trust Implementation

  • Perform a gap analysis between current security posture and zero trust principles

  • Prioritize zero trust initiatives based on risk and business impact

  • Design a phased implementation plan with quick wins and long-term projects

  • Select appropriate technologies and vendors for zero trust components

  • Develop a communication plan for stakeholders

Your checkpoint

Create a gap analysis matrix and a prioritized implementation plan with phases, timelines, and responsible parties.

Week 6

Zero Trust Implementation & NIST and CISA Best Practices

  • Implement identity and access management (IAM) as a foundation for zero trust

  • Deploy multi-factor authentication (MFA) and conditional access policies

  • Apply micro-segmentation techniques to limit lateral movement

  • Configure continuous monitoring and logging for zero trust enforcement

  • Integrate NIST SP 800-207 and CISA zero trust best practices into implementation

Your checkpoint

Build a reference implementation checklist for IAM, MFA, micro-segmentation, and monitoring, citing specific NIST and CISA guidance.

Week 7

NIST and CISA Best Practices & Zero Trust Strategy

  • Compare NIST SP 800-207 and CISA zero trust maturity model requirements

  • Explain the CISA zero trust pillars and maturity stages

  • Identify common pitfalls in zero trust implementation and how to avoid them

  • Develop a continuous improvement process for zero trust

  • Align zero trust strategy with regulatory and compliance requirements

Your checkpoint

Create a crosswalk table mapping NIST SP 800-207 tenets to CISA zero trust pillars and maturity stages.

Week 8

Zero Trust Architecture & Software Defined Perimeter & Zero Trust Strategy & Zero Trust Planning & Zero Trust Implementation & NIST and CISA Best Practices & Zero Trust Foundational Concepts

  • Review all domains and consolidate key concepts

  • Take practice exams and analyze incorrect answers

  • Refine understanding of weak areas through targeted study

  • Simulate exam conditions with timed practice questions

  • Finalize a personal study summary sheet for quick reference

Your checkpoint

Complete a full-length practice exam with a score of 80% or higher, and document a review of all missed questions with correct explanations.

Milestones

Week 2: Explain the seven tenets of zero trust and the roles of the policy engine, policy administrator, and policy enforcement point without notes.

Week 4: Present a zero trust strategy document that includes a maturity assessment, measurable goals, and a roadmap to a peer or mentor for feedback.

Week 6: Demonstrate a working knowledge of SDP components and SPA by accurately describing the packet flow in a typical SDP deployment.

Week 8: Achieve a score of at least 80% on a comprehensive practice exam covering all domains, with a review of incorrect answers.