Removed: the assumption that being inside the perimeter confers trust. The memo’s opening premise is that “no actor, system, network, or service operating outside or within the security perimeter is trusted”.
Outcome: a stated end state with a deadline attached: agency systems “isolated from each other, and the network traffic flowing between and within them is reliably encrypted”.
US federal agencies were given specific zero-trust objectives and a deadline by OMB Memorandum M-22-09, which starts from an assumption most corporate networks still refuse to make. The end state it names for agency systems is isolation from each other with encrypted traffic between and within them.
Source: OMB Memorandum M-22-09, Federal Zero Trust Strategy (26 January 2022)