---
title: CyberArk Helps Agencies Meet Zero Trust Objectives and other Government Mandates
description: Do You Know About This Account? Blog
---

[Blog | Merlin Cyber | Cybersecurity Resources ](https://www.merlincyber.com/insights/blog)

# [CyberArk Helps Agencies Meet Zero Trust Objectives and other Government Mandates](https://www.merlincyber.com/insights/blog/cyberark-helps-agencies-meet-zero-trust-objectives-and-other-government-mandates)

 Written by [Miguel Sian](https://www.merlincyber.com/insights/blog/author/miguel-sian) | Aug 1, 2023 6:33:43 PM

 

How CyberArk helps federal agencies meet Cyber EO 14028, M-22-09 and other government directives

With a push to implement Zero Trust security across federal government, CyberArk helps agencies achieve their Zero Trust objectives with capabilities centered around securing identities and enforcing least privilege - a key tenet of Zero Trust.

CyberArk and Merlin have partnered to help US federal agencies standardize on CyberArk Privileged Access Management (PAM), a critical capability in Zero Trust security. Government is implementing PAM for human and non-human identities to establish a foundational state of security control in alignment with Zero Trust security principles. PAM can help with:

- Discovery and management of privileged credentials;
- Isolation of credentials and sessions;
- Recording and auditing sessions; and
- Security of credentials for privileged users and applications.

 

With the latest innovations from CyberArk, a modern Identity Security platform that combines PAM, Access Management, and Identity Management is available to further advance agencies’ Zero Trust journey. Centered on Intelligent Privileged Controls, this Identity Security platform provides seamless and secure access for all identities with flexible identity automation and orchestration.

**A modern approach to Identity Security centered on privilege to protect against advanced cyber threats**

CyberArk’s solutions help US government modernize cybersecurity and advance towards Zero Trust architecture as required in the Cybersecurity Executive Order 14028 and OMB M-22-09. Furthermore, the solutions improve detection and response to identity-based threats with enterprise logging capabilities and advanced security analytics. It is no longer sufficient to simply identify who is on the network; Zero trust principles require agencies to enforce least privilege, to have better detection and response against anomalous behavior, and to uniformly enforce security policies that limit access – both for users and non-person entities.

Recent directives and memoranda (several listed below) further solidify the business case for CyberArk’s solutions. At Merlin, we help our government customers and partners identify the right solutions to meet their mission needs.

Government Directives and Memoranda

|   | **Government Directive / Mandate** | **Date** | **Guidance** | **Solutions** |
| --- | --- | --- | --- | --- |
| **EO 14028** | **[Executive Order on Improving the Nation’s Cybersecurity (EO14028)](https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/)** | May 2021 | Modernize Federal Government Cybersecurity: | - **CyberArk Identity** - **CyberArk CorePAS** - **CyberArk EPM** - **CyberArk Secrets Manager** |
| **M-21-31** | **[M-21-31 Improving the Federal Government’s Investigative and Remediation Capabilities Related to Cybersecurity Incident](https://www.whitehouse.gov/wp-content/uploads/2021/08/M-21-31-Improving-the-Federal-Governments-Investigative-and-Remediation-Capabilities-Related-to-Cybersecurity-Incidents.pdf)** | Aug 2021 | Requires agencies to log the creation, use and deletion of identities and credentials. Furthermore, logging for "Monitor, Alert and Respond to Anomalous Behaviors/Activities” | - **CyberArk Identity** - **CyberArk CorePAS** |
| **M-22-09** | **[M-22-09 Moving the U.S. Government Toward Zero Trust Cybersecurity Principles](https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf)**** ** | Jan 2022 | Requires agencies to achieve Zero Trust security goals by end of FY24, to include: strong MFA, authentication, and centralized ID management | - **CyberArk Identity** - **CyberArk CorePAS** |
| **M-22-18** | **[M-22-18 Enhancing the Security of the Software Supply Chain through Secure Software Development Practices](https://www.whitehouse.gov/wp-content/uploads/2022/09/M-22-18.pdf)** | Sept 2022 | “…agencies are expected to take appropriate steps to adopt and implement secure software development practices for agency-developed software.” | **CyberArk Secrets Manager** |
| **BOD-23-01** | **[BOD 23-01: Implementation Guidance for Improving Asset Visibility and Vulnerability Detection on Federal Networks](https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks)** | Oct 2022 | “Vulnerability enumeration performed on managed endpoints (e.g., servers, workstations, desktops, laptops) and managed network devices (e.g., routers, switches, firewalls) must be conducted with privileged credentials.” | **CyberArk Secrets Manager** |
| **DOD ZT** | **[DOD Zero Trust Strategy](https://dodcio.defense.gov/Portals/0/Documents/Library/DoD-ZTStrategy.pdf)** | Nov 2022 | DOD ZT User Pillar: continually authenticate, access and monitor user activity patterns to govern users’ access and privileges while protecting and securing all interactions. | - **CyberArk Identity** - **CyberArk CorePAS** |
| **CISA ZT** | **[CISA Zero Trust Maturity Model](https://www.cisa.gov/resources-tools/resources/zero-trust-maturity-model)** | April 2023 | Access Management: Agency uses automation to authorize just-in-time and just-enough access tailored to individual actions and individual resource needs | - **CyberArk Identity** - **CyberArk CorePAS** - **CyberArk Secrets Manager** |

 

 

[View full post](https://www.merlincyber.com/insights/blog/cyberark-helps-agencies-meet-zero-trust-objectives-and-other-government-mandates)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Miguel Sian"
  },
  "dateModified" : "2023-09-15T12:39:31.023Z",
  "datePublished" : "2023-08-01T18:33:43Z",
  "headline" : "CyberArk Helps Agencies Meet Zero Trust Objectives and other Government Mandates",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1060,
    "url" : "https://5464151.fs1.hubspotusercontent-na1.net/hubfs/5464151/Zero%20Trust%20Blog-v.1-01.jpg",
    "width" : 2667
  },
  "mainEntityOfPage" : "https://www.merlincyber.com/insights/blog/cyberark-helps-agencies-meet-zero-trust-objectives-and-other-government-mandates",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Blog - Merlin"
  }
}
```