01 · The estate
Walk the site
All 43 controls placed where they actually live — across the governance layer, the enterprise estate, the
facility spine and the access paths into both. Select any zone to zoom in and see what the problem is there,
what remediation does about it, and what that delivers. Zone colour and score follow the controls inside it.
1.67
1.81
2.00
2.00
2.00
2.00
2.25
2.25
2.38
2.50
2.50
3.00
Full estate weakest · Third-party access 1.67 · Governance & disclosure 1.81 · Backup & recovery estate 2.00
GOVERNANCE
ENTERPRISE
FACILITY
ACCESS & PROGRAMME
1.81 Governance & disclosure Board & Audit Committee Board & Audit Committee Disclosure controls Disclosure controls Materiality framework Materiality framework Regulatory register Regulatory register Compliance metrics Compliance metrics 8 controls
target 3.88
2.38 Corporate & enterprise IT Microsoft 365 Microsoft 365 File shares / NAS File shares / NAS HR & finance HR & finance Endpoints Endpoints 8 controls
target 3.94
2.50 Identity & access Directory / tenant Directory / tenant Privileged vault Privileged vault MFA & network acce… MFA & network access 4 controls
target 4.00
2.00 Backup & recovery estate Backup platform Backup platform Immutable archive Immutable archive Recovery runbooks Recovery runbooks Secondary site Secondary site 6 controls
target 3.92
2.00 Power train Utility feed Utility feed Generators Generators Fuel supply Fuel supply UPS / battery UPS / battery Switchgear / PDU Switchgear / PDU 2 controls
target 4.00
2.00 Cooling & thermal Chiller plant Chiller plant CRAH units CRAH units Water supply Water supply 1 control
target 4.00
2.25 Data halls Data hall A Data hall A Data hall B Data hall B Customer racks Customer racks Remote hands Remote hands 2 controls
target 4.00
3.00 Network & monitoring Meet-me room Meet-me room Carrier diversity Carrier diversity Core switching Core switching SOC / detection SOC / detection 2 controls
target 4.00
2.50 Building systems & OT BMS BMS EPMS EPMS Historian / SCADA Historian / SCADA DMZ & jump hosts DMZ & jump hosts 2 controls
target 3.75
1.67 Third-party access Contractor accoun… Contractor accounts Vendor remote acc… Vendor remote access Processors Processors Service accounts Service accounts 3 controls
target 4.00
2.25 Site access & assets Badge / ACS Badge / ACS Visitor management Visitor management Camera retention Camera retention Asset inventory Asset inventory 2 controls
target 4.00
2.00 Continuity programme Impact analysis Impact analysis Continuity plans Continuity plans Exercise programme Exercise programme Resilience metrics Resilience metrics 3 controls
target 3.83 Select a zone to zoom · Esc or Back to return
Twelve zones, 43 controls. Third-party and vendor access is the weakest part of the
estate at 1.67 — select it to see why.
