The new roadmap gives agencies some easier first steps toward meeting the mandate of a "zero trust" security architecture.
