Extensive discussion can be found here:

https://www.linkedin.com/posts/seanconnellydc_daf-zero-trust-strategy-ugcPost-7272225237633536000-yUc7?utm_source=share&utm_medium=member_desktop

It would be interesting to audit this against a maturity model. The roadmap is in a different link.