AFAAQ / Industry / 03
Cybersecurity
Assets, events and response as a single operational control system.
Operating pressures
Assets, events and response as a single operational control system.
- Events pass through detection, analysis, risk and response in order
- Each stage must hand the next a richer version of the same record
- A control boundary wraps the whole chain rather than guarding one end
- Priority is a scored property, not a queue position
System shape
A chain inside a boundary.
The security model is a chain: assets produce events, events reach detection, detection feeds analysis, analysis produces risk, and risk resolves into response.
What distinguishes it from any other pipeline is the boundary drawn around it. Identity, access, audit and observability apply to the whole chain rather than to a single stage.
AFAAQ / System modelCybersecurity — chain
- Assets
- Events
- Detection
- Analysis
- Risk
- Response
- ▣Core
- ▭Domain
- ┆Control boundary
Context