Structure

Resources and states are places. Processes and events are transitions. Each transition carries a ratio stating how much of one thing becomes how much of another, so that value is conserved along every chain: a server to a transaction, a transaction to an invoice, an invoice to a covenant. A disruption is a transition that fires, and its consequence is what stops flowing downstream. The structure is what allows cyber, data and AI to be modelled as one estate rather than three: a compromised credential, a corrupted feed and a withdrawn model are each an interruption of flow through the same net.

Elements and relations

Twelve element types populate the net: organisation, business capability, process, system, data asset, AI model, vendor, facility, role and workforce, control, commitment and scenario. Eleven kinds of relation connect them, among them depends on, hosted on, data flows to, provides service to, contracted with, obligated by and fulfils. The last two distinguish the model from a map of technology. A commitment is an element in its own right, with a counterparty, a required level of performance, a measurement window and a breach cost, and the model records which parts of the enterprise fulfil it. A contractual service level, a regulatory obligation and a loan covenant enter the same way and are priced identically.

The rule on controls

A control enters the model on one condition: it declares what it changes, in probability, severity, capacity or cost. A control that declares nothing is not admitted, whatever framework requires it. This is how the model keeps out protection whose purpose is to be seen, and how it counts two layers of defence that depend on one provider once, because they fail together.

Provenance

Every element carries the evidence it came from. In the inferred state each is graded as cited by more than one public source, cited once, or inferred, with the inference written out; in the corrected state each is cited to the record inside the enterprise that established it. Confidence decays with the age of the evidence, and the confidence of any conclusion is capped at that of the least certain element on its path.

Status

The structure and its ontology are specified and are the basis of every offering. The lineage runs through the resilience literature on command-and-control architectures, in which a net of this kind was first applied to recovery, and the two obstacles recorded there, that no translator exists from an enterprise’s own records into a net and that a net begins to go stale the day it is drawn, are the two problems the correction and the current states are built to answer.