TIC 3.0 includes five security objectives that allow federal agencies to make the transition to the zero trust model:
Traffic Management – Validating trusted internet connections and ensuring that authorized activities are secure. Monitoring who has access to specific data, why access was granted, and whether access is still necessary.
Traffic Confidentiality – Keeping information on what data is being accessed, who is sending it, and who is receiving it private and secure. Checking that only authorized personnel have access to traffic data.
Traffic Integrity – Maintaining the integrity of data while in transit. Preventing data from being altered and/or detecting any alteration.
Service Resiliency – Ensuring continuous operation of security systems. Threats are constantly growing and evolving and system continuity in the face of new threats and technology is vital.
Timely and Effective Responses – When threats are detected, reaction time is of the essence. TIC 3.0 promotes effective reactions, the adaptation of future responses, the implementation of new policies, and the adoption of new countermeasures when a system has been breached.