overview/ defense (cmmc contractor)/ defense-cmmc__defense-contractor-cui-enclave__third-party-vendor-access

Defense (CMMC contractor) Defense contractor with CUI enclave Third-party vendor accesses an enterprise resource

Seven views rendered from a single resolved scenario, with every honesty marker intact. Use the vendor overlay in the toolbar to re-resolve against a named vendor stack. 1635 in-scope provisions across 6 frameworks.

Trust Flow rail

Topology map

Stack diagram

Coverage heatmap

Maturity overlay (current → Advanced)

Threat overlay (m2m-token-replay)

Vendor substitution: Cloudflare One vs. Zscaler ZTE

Risk register (threat: m2m-token-replay)

Trust Flow rail

Satisfaction distribution

satisfied197 · 12.0%

partial1438 · 88.0%

gap0 · 0.0%

pendingEvidence (discretion-capped)1399

total in scope1635

Frameworks in scope (6)

nist-sp-800-53-r5159103701014

cisa-ztmm-v201600160

nist-sp-800-171-r324106097

nist-csf-2-001060106

nist-sp-800-2071319015

dod-zt11007

Diagnostics (6)

gap (0)warn (6)info (0)

discretion-cap · cisa-ztmm-v2

Framework cisa-ztmm-v2: 160 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · dod-zt

Framework dod-zt: 7 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-csf-2-0

Framework nist-csf-2-0: 106 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-171-r3

Framework nist-sp-800-171-r3: 97 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-207

Framework nist-sp-800-207: 15 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-53-r5

Framework nist-sp-800-53-r5: 1014 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

Resolved MaturityProfile

IdentityAdvanced

DevicesAdvanced

NetworksAdvanced

ApplicationsAndWorkloadsInitial

DataAdvanced

VisibilityAndAnalyticsAdvanced

AutomationAndOrchestrationInitial

GovernanceAdvanced

Static fallback (JavaScript disabled)

All seven views render as static SVGs below. The interactive toolbar (vendor overlay) and the right-side honesty panels require JavaScript.