overview/ retail/ retail__campus-enterprise__remote-user-saas

Retail Campus enterprise Remote user opens a SaaS application

Seven views rendered from a single resolved scenario, with every honesty marker intact. Use the vendor overlay in the toolbar to re-resolve against a named vendor stack. 678 in-scope provisions across 5 frameworks.

Trust Flow rail

Topology map

Stack diagram

Coverage heatmap

Maturity overlay (current → Advanced)

Threat overlay (m2m-token-replay)

Vendor substitution: Cloudflare One vs. Zscaler ZTE

Risk register (threat: m2m-token-replay)

Trust Flow rail

Satisfaction distribution

satisfied218 · 32.2%

partial460 · 67.8%

gap0 · 0.0%

pendingEvidence (discretion-capped)369

total in scope678

Frameworks in scope (5)

pci-dss-v4-0-1205141054

cisa-ztmm-v201600160

nist-csf-2-001060106

cisa-cpgs-v2034034

nist-sp-800-2071319015

Diagnostics (8)

gap (0)warn (8)info (0)

maturity-shortfall

Equipment siem-soar expects AutomationAndOrchestration maturity ≥ Initial, resolved profile is Traditional.

maturity-shortfall

Standing-capability equipment iga expects Identity maturity ≥ Advanced, resolved profile is Initial. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

maturity-shortfall

Standing-capability equipment iga expects Governance maturity ≥ Advanced, resolved profile is Initial. Equipment remains in scope; warning indicates platform-level expression may be below typical depth at this maturity.

discretion-cap · cisa-cpgs-v2

Framework cisa-cpgs-v2: 34 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · cisa-ztmm-v2

Framework cisa-ztmm-v2: 160 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-csf-2-0

Framework nist-csf-2-0: 106 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-207

Framework nist-sp-800-207: 15 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · pci-dss-v4-0-1

Framework pci-dss-v4-0-1: 54 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

Resolved MaturityProfile

IdentityInitial

DevicesInitial

NetworksInitial

ApplicationsAndWorkloadsInitial

DataInitial

VisibilityAndAnalyticsInitial

AutomationAndOrchestrationTraditional

GovernanceInitial

Static fallback (JavaScript disabled)

All seven views render as static SVGs below. The interactive toolbar (vendor overlay) and the right-side honesty panels require JavaScript.