Network & Access Modernization — Project Plan

1. Overview

Establish an authoritative naming plane and identity-driven access. Follows: Name and address → Identify → Access → Enforce at the edge → Evidence.

2. Phases

Phase 0 — Charter and Alignment

Confirm naming-plane ownership, pilot population, and boundary dispositions.

Phase 1 — Naming and Addressing

Designate or confirm the authoritative DNS, DHCP, and IPAM plane. Ensure it can serve as the asset-identity join key.

Phase 2 — Identity Availability

Confirm identity claims are available to access decision points. Identify gaps.

Phase 3 — Identity-Driven Access Pilot

Deploy Zero Trust Network Access or Secure Access Service Edge for a pilot population. Document residual VPN or perimeter path.

Phase 4 — Customer-Edge Enforcement and Evidence

Document customer-edge enforcement approach. Emit at least one access or path decision as a canonical claim.

3. Success Measures

  • Authoritative naming plane operational for pilot scope.
  • Identity-driven access available; legacy path documented as residual.
  • At least one access decision emits a claim with provenance.
  • Customer-edge approach and boundary dispositions documented.

4. Immediate Next Actions

  1. Confirm naming-plane ownership.
  2. Inventory current remote-access paths.
  3. Identify where identity claims can be consumed.
  4. Define pilot population.

Project artifact. No internal architectural decision record identifiers.

Back to top