overview/ energy & utilities/ energy-utilities__ot-cell-purdue__third-party-vendor-access

Energy & Utilities OT cell (Purdue Model) Third-party vendor accesses an enterprise resource

Single ResolvedScenario, seven views, every honesty marker the resolver emits. Vendor overlay and reader-tier toggles live in the toolbar. 396 in-scope provisions across 6 frameworks.

Trust Flow rail

Topology map

Stack diagram

Coverage heatmap

Maturity overlay (current → Advanced)

Threat overlay (m2m-token-replay)

Vendor substitution: Cloudflare One vs. Zscaler ZTE

Trust Flow rail

Satisfaction distribution

satisfied18 · 4.5%

partial348 · 87.9%

gap30 · 7.6%

pendingEvidence (discretion-capped)238

total in scope396

Frameworks in scope (6)

cisa-ztmm-v201564108

nist-csf-2-00852157

nerc-cip836223

cisa-cpgs-v2031320

nist-sp-800-2071022013

circia018017

Diagnostics (10)

gap (4)warn (6)info (0)

discretion-cap · circia

Framework circia: 17 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · cisa-cpgs-v2

Framework cisa-cpgs-v2: 20 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · cisa-ztmm-v2

Framework cisa-ztmm-v2: 108 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nerc-cip

Framework nerc-cip: 23 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-csf-2-0

Framework nist-csf-2-0: 57 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

discretion-cap · nist-sp-800-207

Framework nist-sp-800-207: 13 provision(s) with medium/high discretion had full structural coverage but were capped at "partial" pending auditor judgment / explicit evidence.

control-uncovered · cisa-cpgs-v2

Framework cisa-cpgs-v2: 3 provision(s) cite fillable Components with no in-scope Equipment filling them — the control class is unrepresented in the scenario stack.

control-uncovered · cisa-ztmm-v2

Framework cisa-ztmm-v2: 4 provision(s) cite fillable Components with no in-scope Equipment filling them — the control class is unrepresented in the scenario stack.

control-uncovered · nerc-cip

Framework nerc-cip: 2 provision(s) cite fillable Components with no in-scope Equipment filling them — the control class is unrepresented in the scenario stack.

control-uncovered · nist-csf-2-0

Framework nist-csf-2-0: 21 provision(s) cite fillable Components with no in-scope Equipment filling them — the control class is unrepresented in the scenario stack.

Resolved MaturityProfile

IdentityInitial

DevicesAdvanced

NetworksAdvanced

ApplicationsAndWorkloadsInitial

DataInitial

VisibilityAndAnalyticsInitial

AutomationAndOrchestrationInitial

GovernanceInitial

Static fallback (JavaScript disabled)

All seven views render as static SVGs below. The interactive toolbar (vendor overlay, reader tier) and the right-side honesty panels require JavaScript.