Account Access Management & Permissions
Everything you need to know about NIST’s new guidance in “SP 1800-35: Implementing a Zero Trust Architecture”

Everything you need to know about NIST’s new guidance in “SP 1800-35: Implementing a Zero Trust Architecture”

6/19/2025 · Aaron McAllister, Sharon Goldberg

What this post added

This post details how Cloudflare's Zero Trust platform aligns with NIST SP 1800-35's reference architecture for implementing Zero Trust Architecture (ZTA). It explains how Cloudflare's products can be integrated with third-party vendors to support the NIST reference architecture, specifically focusing on the 'Run Phase' which covers both cloud and on-premise resources. It highlights Cloudflare's role in providing Policy Enforcement Points (PEPs) and Policy Engines (PEs) within the ZTA framework, and how its platform supports the Policy Information Points (PIPs) like Identity, Credential, and Access Management (ICAM), Endpoint Detection and Response (EDR)/Endpoint Protection Platforms (EPP), and Security Analytics.

Read the original post ↗