overview/ federal civilian/ federal-civilian__federal-civilian-hybrid-cloud__remote-user-saas

Federal Civilian Federal civilian hybrid cloud Remote user opens a SaaS application

Seven views rendered from a single resolved scenario, with every honesty marker intact. Use the vendor overlay in the toolbar to re-resolve against a named vendor stack. 1569 in-scope provisions across 8 frameworks.

Trust Flow rail

Topology map

Stack diagram

Coverage heatmap

Maturity overlay (current → Advanced)

Threat overlay (m2m-token-replay)

Vendor substitution: Cloudflare One vs. Zscaler ZTE

Risk register (threat: m2m-token-replay)

Trust Flow rail

Satisfaction distribution

satisfied172 · 11.0%

partial1397 · 89.0%

gap0 · 0.0%

pendingEvidence (discretion-capped)1363

total in scope1569

Frameworks in scope (8)

nist-sp-800-53-r5159103701014

cisa-ztmm-v201600160

nist-csf-2-001060106

cisa-cpgs-v2034034

nist-sp-800-2071319015

circia018017

fedramp012010

nsa-zt-implementation-guides01107

Diagnostics (8)

gap (0)warn (8)info (0)

discretion-cap · circia

Framework circia: 17 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · cisa-cpgs-v2

Framework cisa-cpgs-v2: 34 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · cisa-ztmm-v2

Framework cisa-ztmm-v2: 160 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · fedramp

Framework fedramp: 10 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-csf-2-0

Framework nist-csf-2-0: 106 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-207

Framework nist-sp-800-207: 15 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-53-r5

Framework nist-sp-800-53-r5: 1014 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nsa-zt-implementation-guides

Framework nsa-zt-implementation-guides: 7 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

Resolved MaturityProfile

IdentityAdvanced

DevicesAdvanced

NetworksAdvanced

ApplicationsAndWorkloadsAdvanced

DataInitial

VisibilityAndAnalyticsAdvanced

AutomationAndOrchestrationInitial

GovernanceAdvanced

Static fallback (JavaScript disabled)

All seven views render as static SVGs below. The interactive toolbar (vendor overlay) and the right-side honesty panels require JavaScript.