Key Technologies for DoD’s Implementation of OT Zero Trust Protection

Date: 04/30/2025

Vendor: BlastWave

Technology/Topic: Key Technologies for DoD’s Implementation of OT Zero Trust Protection

======================================================

Welcome to the Technical Exchange Meeting (TEM)!

The DoD seeks to build OT networks where critical assets are invisible to attackers, remote access is seamless and secure, and breaches are contained before they spread. That’s the power of an authentic Zero Trust architecture. This starts with network cloaking, effectively hiding your vulnerable OT devices from reconnaissance and eliminating a key initial attack vector. Next, secure remote access with passwordless MFA needs to be implemented, ensuring only authorized personnel gain entry, drastically reducing the risk of phishing and credential theft. Finally, software-defined segmentation allows for granular control, creating micro-perimeters that limit lateral movement and contain breaches, even if an attacker gets inside.

DoD recognizes the unique challenges of OT environments, especially with legacy systems and the increasing threat landscape. New DoD OT Zero Trust requirements will be issued in 2025 that are different than the IT Zero Trust requirements, and this session will discuss several of the key technologies that will power the Protection component of those specifications and fit tightly into the NIST CyberSecurity Framework (CSF). A comprehensive OT Zero Trust solution goes beyond traditional perimeter security, addressing the root causes of cyberattacks. By combining network cloaking, passwordless secure remote access, and dynamic segmentation, the DoD can deploy a robust, layered defense that’s powerful and easy to manage.

======================================================

To join the DISA TEM mailing list, please contact: disa.tem@mail.mil

======================================================

Disclaimer:

— TEMs do not serve as a marketing venue or request for proposal actions.

— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.

— TEMs do not serve as an endorsement of any presented technologies or capabilities

— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.

— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.