Everything you need to know about NIST’s new guidance in “SP 1800-35: Implementing a Zero Trust Architecture”

This blog condenses NIST SP 1800-35’s guidance on implementing Zero Trust Architecture using the Enhanced Identity Governance model, outlining key components (PEP, PDP with PE/PA, and PIPs) and the crawl/run phases, then shows how Cloudflare’s Zero Trust platform and integrations with ICAM/IdPs, EDR/EPP, SIEM, and data security (DLP, RBI, CASB) can realize the reference architecture across on-prem and cloud resources. It emphasizes Cloudflare’s global anycast delivery for PEP/PDP, FedRAMP-aligned operations, continuous monitoring and shared signals, and emerging post-quantum cryptography support to help organizations accelerate scalable, policy-driven ZTA deployments.