Zero-Trust Centric TIC 3.0 Documents Scheduled for Spring Release

Sean Connelly, Trusted Internet Connections program manager at the Cybersecurity and Infrastructure Security Agency, said his office is working to release finalized TIC 3.0 documents by spring. During an FCW-organized event, Connelly explained that the TIC 3.0 aligns with zero trust architecture as it is aimed at shrinking trust zones to reduce attack surfaces. Connelly added that TIC 3.0 policy will be implemented to accelerate cloud adoption, which would then promote flexibility to security arrangements and adaptability to the dissolution of traditional security perimeters, MeriTalk reported. The TIC 3.0 policy also eliminates the so-called TIC tax, reduces latency and improves user experience, Connelly said. Currently, the Small Business Administration and the Department of Energy are the only federal agencies that have completed TIC 3.0 pilots.