overview/ manufacturing/ manufacturing__ot-cell-purdue__engineer-pushes-config

Manufacturing OT cell (Purdue Model) Engineer pushes config to an operational asset

Seven views rendered from a single resolved scenario, with every honesty marker intact. Use the vendor overlay in the toolbar to re-resolve against a named vendor stack. 332 in-scope provisions across 4 frameworks.

Trust Flow rail

Topology map

Stack diagram

Coverage heatmap

Maturity overlay (current → Advanced)

Threat overlay (m2m-token-replay)

Vendor substitution: Cloudflare One vs. Zscaler ZTE

Risk register (threat: m2m-token-replay)

Trust Flow rail

Satisfaction distribution

satisfied13 · 3.9%

partial319 · 96.1%

gap0 · 0.0%

pendingEvidence (discretion-capped)315

total in scope332

Frameworks in scope (4)

cisa-ztmm-v201600160

nist-csf-2-001060106

cisa-cpgs-v2034034

nist-sp-800-2071319015

Diagnostics (23)

gap (0)warn (23)info (0)

maturity-shortfall

Equipment idp expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment pam expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment edr-xdr expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment edr-xdr expects ApplicationsAndWorkloads maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment api-gateway expects ApplicationsAndWorkloads maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment api-gateway expects Networks maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment pam expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment privileged-session-recorder expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment siem-soar expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment siem-soar expects AutomationAndOrchestration maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Equipment privileged-session-recorder expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Standing-capability equipment ca-pki expects ApplicationsAndWorkloads maturity ≥ Initial, resolved profile is Traditional. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment ca-pki expects Data maturity ≥ Initial, resolved profile is Traditional. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment kms-secrets expects Data maturity ≥ Initial, resolved profile is Traditional. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment kms-secrets expects ApplicationsAndWorkloads maturity ≥ Initial, resolved profile is Traditional. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment iga expects Identity maturity ≥ Advanced, resolved profile is Initial. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment iga expects Governance maturity ≥ Advanced, resolved profile is Initial. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment cdm expects ApplicationsAndWorkloads maturity ≥ Initial, resolved profile is Traditional. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment cdm expects VisibilityAndAnalytics maturity ≥ Initial, resolved profile is Traditional. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

discretion-cap · cisa-cpgs-v2

Framework cisa-cpgs-v2: 34 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · cisa-ztmm-v2

Framework cisa-ztmm-v2: 160 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-csf-2-0

Framework nist-csf-2-0: 106 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-207

Framework nist-sp-800-207: 15 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

Resolved MaturityProfile

IdentityInitial

DevicesInitial

NetworksTraditional

ApplicationsAndWorkloadsTraditional

DataTraditional

VisibilityAndAnalyticsTraditional

AutomationAndOrchestrationTraditional

GovernanceInitial

Static fallback (JavaScript disabled)

All seven views render as static SVGs below. The interactive toolbar (vendor overlay) and the right-side honesty panels require JavaScript.