Zero Possession Architecture (ZPA): Trust Nothing, Possess Nothing

Zero Possession Architecture (ZPA) is CDA's methodology for the `IAT` (Identity Access & Trust) domain.

CDA ProprietaryIATIdentityBeginnerCUI1,841 words8 min readApr 7, 2026

Last updated Apr 11, 2026v2

CLASSIFICATION: CUI

This article requires CUI clearance or higher.

What you need

Create a free Nexus ID to access CDA proprietary content including PDM domain explainers, methodology deep-dives, and reconnaissance mission briefings.

Create Nexus ID (Free)

Also at this clearance level

DPSDataIntermediateCUI

Table of Contents

Zero Possession Architecture (ZPA): Trust Nothing, Possess Nothing

What you need

Also at this clearance level

Data Protection and Sovereignty (DPS): The Geological Core

Vulnerability and Surface Defense (VSD): The Oceans

Security for Manufacturing

Security for SaaS Companies

The Academy

The Command Post

The Armory