# CISA Guides Federal Agencies to Adopt Zero Trust

The Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive guide to assist federal civilian agencies in transitioning from legacy perimeter-based security models to modern zero trust architectures using Secure Access Service Edge (SASE) solutions under the Trusted Internet Connections (TIC) 3.0 initiative. This guidance supports agencies in enhancing network performance, security visibility, and operational efficiency while enabling telemetry sharing with CISA to improve cybersecurity posture amid evolving threats and distributed work environments. The guide also extends applicability to state, local governments, and critical infrastructure sectors pursuing zero trust strategies.

- **Why this matters:** Federal agencies are encouraged to modernize their cybersecurity infrastructure by adopting SASE and zero trust frameworks, creating significant opportunities for contractors specializing in these technologies.
- The TIC 3.0 framework facilitates migration away from traditional perimeter-based solutions like MTIPS and legacy VPNs, emphasizing cloud-based, distributed security architectures.
- Procurement professionals should anticipate increased demand for zero trust and SASE-related services and solutions to support federal cybersecurity modernization efforts.
- Organizations serving state, local, and critical infrastructure sectors may also find opportunities as these entities align with federal zero trust guidance.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Cloud Services
**Published:** June 25, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Department of Homeland Security (DHS)
- Federal Civilian Agencies
- Federal Civilian Executive Branch

### Key Quotes
> CISA continues to support federal agencies and the broader cybersecurity ecosystem with their continued adoption of zero trust network capabilities to meet mission needs and the evolving cyber threat landscape.
> — Chris Butera, Acting Executive Assistant Director for Cybersecurity, CISA

> TIC 3.0 facilitates agencies27 transition from traditional perimeter-based solutions, such as Managed Trusted Internet Protocol Service (MTIPS) and legacy VPNs and firewall stacks, to modern SASE and Security Service Edge (SSE) platforms.
> — Sean Connelly, Senior Official, Zscaler

### Sources
- [New CISA Guide Assists Federal Agencies with Transitioning to Modernized Zero Trust Architectures - HSToday](https://www.hstoday.us/subject-matter-areas/cybersecurity/new-cisa-guide-assists-federal-agencies-with-transitioning-to-modernized-zero-trust-architectures) - Homeland Security Today
- [New CISA Guide Assists Federal Agencies with Transitioning to Modernized Zero Trust Architectures | CISA](https://www.cisa.gov/news-events/news/new-cisa-guide-assists-federal-agencies-transitioning-modernized-zero-trust-architectures) - CISA
- [CISA Issues Zero Trust Guide Supporting TIC 3.0 Adoption](https://www.executivegov.com/articles/cisa-issues-zero-trust-guide-supporting-tic-30-adoption) - ExecutiveGov