Modular guidelines provide Department of Defense agencies pathways for building foundational zero-trust capabilities.