|
Work item:
|
X.ztmc
|
|
Subject/title:
|
Guidelines for Hhigh level Zero trust model and its security capabilities for in telecommunication networks
|
|
Status:
|
Under study
|
|
Approval process:
|
TAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
2026-09 (Medium priority)
|
|
Liaison:
|
ITU-T SG13, ISO/IEC JTC 1/SC 27/WG 4, 3GPP SA3, ETSI, IEEE Cybersecurity and privacy Zero Trust Group, NIST
|
|
Supporting members:
|
Korea (Rep. of), Soonchunhyang University, KT Corp., ETRI, KISA
|
|
Summary:
|
This draft Recommendation provides guidelines defines afor high level zero trust model suitable for telecommunication networks that meet zero trust principles. Based on the principle of ‘Never trust, always verify’, zero trust does not grant implicit trust based on the location of the user requesting access.
Although there are various existing zero trust models, it is difficult to design and implement a zero trust model suitable for telecommunication networks, and to provide interoperability and operational efficiency. Therefore, it is necessary to define a zero trust model and related security capabilities suitable for telecommunication networks.
In addition, there is a need to identify key areas that consist of the model and the security capabilities that each key area should have.
The zero trust model and security capabilities in this draft Recommendation can be used to develop specific models that applies zero trust principles to various industrial sectors as future work items.
This draft Recommendation addresses the following topics: a zero trust model suitable for telecommunication networks; key areas of the model and security capabilities by the key area.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2024-03-11 13:12:06
|
|
Last update:
2024-03-12 09:42:26
|
