--- title: "CNI Control | Govern essential-service connections | Firevault" url: https://fire-vault.com/cni-control description: "Assess physical control of selected essential-service paths, with operational ownership, public-service consequences and tested restoration procedures." lang: en-GB --- Control by Firevault (https://fire-vault.com/control) / CNI Control # CNI Control. Put essential services first. Essential services depend on suppliers, remote facilities and operational communications. Physical boundaries must be designed around service continuity and public consequences, not around a generic shutdown. Discuss your Control requirements: https://fire-vault.com/contact?subject=control See where Control applies Which external connection can change without putting an essential service at risk? Incident Path exposed Outcome Control taken Approximately 120–150 ms Management enable/disable operation Around 2–3 seconds SMS round-trip operation, good signal March 2025 test observations, not guaranteed timings. Why connection control matters ## A connection change is a service decision. Service interruption can affect customers, communities and public safety. A local isolation action is appropriate only where the resulting state and alternative operation are understood. Standing connections can link enterprise systems, contractors and remote operational assets. A route that appears unnecessary to security may still carry monitoring, emergency or operational traffic. Reported incidents in related sectors ### South Staffs Water 2022 Sector Water What was reported Attackers were inside the network for nearly two years before they were found. Drinking water stayed safe, but customer data was published and the ICO later fined the company. Customer data: https://fire-vault.com/control-blueprint/utilities-water Bitdefender, reporting the ICO: https://www.bitdefender.com/en-au/blog/hotforsecurity/uk-water-1-million-hackers-ransomware ### Ukrainian distribution companies 2015 Sector Energy What was reported Attackers used remote access to open substation breakers, cutting power to around 230,000 customers for several hours. Grid operations: https://fire-vault.com/control-blueprint/energy Wikipedia summary of public reporting: https://en.wikipedia.org/wiki/2015_Ukraine_power_grid_hack ### DSB, Denmark 2022 Sector Rail What was reported Trains across Denmark stopped after a software supplier shut down a safety-critical driver app following a compromise of its test environment. Supplier system: https://fire-vault.com/control-blueprint/rail Reuters: https://www.reuters.com/technology/danish-train-standstill-saturday-caused-by-cyber-attack-2022-11-03/ These incidents show how a connection path can shape what happens next. They are not claims about what any single control would have prevented. What Control changes ## Three things you can control physically. Control complements your network security, detection, identity management and incident response. It does not replace them. **It gives their decisions a physical place to act, on the connections you select.** Control access ### Govern when selected connections may exist. Supplier, engineering and partner routes are connected for approved work, to named systems, for a set window, and disconnected afterwards. Not open by default. Control Plans Control third-party connections: https://fire-vault.com/control-module/relay Control connections in two approved stages: https://fire-vault.com/control-module/unlink Control exposure ### Reduce unnecessary standing paths into critical systems. Each critical system keeps the connections it genuinely needs, inside a defined physical boundary. Paths it does not need are disconnected. Control Plans Enforce physical network boundaries: https://fire-vault.com/control-module/execute Protect critical system connections: https://fire-vault.com/control-module/validate Control intervention ### Physically disconnect selected connections under an agreed authority. When your response plan calls for it, the selected path is physically disconnected on a decision by the people or rules you agreed in advance, and stays disconnected until an authorised release. Control Plans Contain ransomware spread: https://fire-vault.com/control-module/fracture Contain a live incident: https://fire-vault.com/control-module/isolate Authorise emergency disconnection: https://fire-vault.com/control-module/fracture#also Where Control applies & Control modules ## CNI Control. The Modules that make a difference. A remote facility has a supplier-maintenance link separate from its service telemetry. The maintenance route is considered for Control; telemetry and local operation are assessed independently. Where do you need Control? **Selected essential-service boundary held** ### Govern access to essential-service assets. Anchor defines the named asset's access scope, Lock governs assessed protected-boundary conditions, and Execute carries out an authorised intervention. Essential-service continuity and safety require local validation. Commanded Hold the assessed asset-access path under operational authority. Reported by the control point Illustrative selected access paths withdrawn. Independently verified Confirm local operation and safety independently; no safe-process guarantee is implied. Explore CNI Control (https://fire-vault.com/cni-control) Modules in this example **Anchor**Critical asset protection: https://fire-vault.com/control-module/anchor **Lock**Protected-boundary access control: https://fire-vault.com/control-module/lock **Execute**Authorised physical intervention: https://fire-vault.com/control-module/execute Explore all nine Modules (https://fire-vault.com/control-modules)Explore adoption approaches (https://fire-vault.com/control-plans) Concept illustration. Commanded, reported and independently verified states are shown separately because they are not the same thing, and what can be verified depends on your deployment. Disconnecting a selected path changes what can use that path. On its own, it does not contain an incident across a whole environment, and routes outside the plan, such as wireless or cellular links, need their own controls. Control Blueprints ## Your industry’s connections, mapped and controlled. How CNI Control applies in the industries where these connections matter most. Each Blueprint maps real systems, suppliers and operating constraints. Image: BP-01 Water Control Blueprint icon (https://fire-vault.com/__l5e/assets-v1/c813ccff-24b8-48e9-8cf9-37bc1872048d/BP-01_water.png) ### Water Treatment and distribution SCADA. Read the Water Blueprint (https://fire-vault.com/control-blueprint/utilities-water) Image: BP-02 Energy Control Blueprint icon (https://fire-vault.com/__l5e/assets-v1/4f1631a8-bbd0-4122-94d4-3dc5305d050b/BP-02_energy.png) ### Energy Electricity network control systems. Read the Energy Blueprint (https://fire-vault.com/control-blueprint/energy) Image: BP-04 Rail Control Blueprint icon (https://fire-vault.com/__l5e/assets-v1/0f9e1bb6-2739-43eb-b117-2df5457fe7ed/BP-04_rail.png) ### Rail Train and signalling networks. Read the Rail Blueprint (https://fire-vault.com/control-blueprint/rail) Image: BP-06 Telecommunications Control Blueprint icon (https://fire-vault.com/__l5e/assets-v1/008580c1-6ac6-46e4-8b02-c68b924afc04/BP-06_telecommunications.png) ### Telecommunications Carrier and backbone networks. Read the Telecommunications Blueprint (https://fire-vault.com/control-blueprint/telecommunications) See all industry Blueprints (https://fire-vault.com/control-blueprints) Fourteen Blueprints are published. Each deployment is designed around your own estate. Firevault, as featured in - Read about Firevault on TechRadar Pro: https://www.techradar.com/pro/uk-startup-put-physical-disconnect-switch-in-its-cloud-storage-offering-to-mitigate-ransomware-attacks-but-will-that-be-enough - Read about Firevault on Yahoo Finance: https://uk.finance.yahoo.com/news/firevault-launches-help-businesses-directors-074500961.html - Read about Firevault on Channel Insider: https://www.channelinsider.com/security/tools-and-platforms/firevault-security-offline-platform-offering/ - Read about Firevault on Security Buyer: https://securitybuyer.com/uk-cybersecurity-startup-launches-firevault/ - Read about Firevault on SecurityBrief: https://securitybrief.com.au/story/firevault-unveils-offline-digital-vault-to-combat-rising-cyber-risks How Control works ## Decisions made by people. Enforced physically. Your tools detect, your people and policies decide, and Control changes the connection state of the selected path. Here is what that rests on. ### Physical enforcement Control changes the connection state of a selected path at Layer 1: connected, or physically disconnected. It does not inspect or alter the traffic on it. ### An independent command path Commands reach each control point over a configured command path, kept separate from the network being controlled. How each point behaves if that path is lost is agreed and tested. ### Authorised changes Who can connect, disconnect or release each path is agreed in advance: named people, more than one approval where it matters, or rules and high-confidence alerts you set. ### Evidence, as configured Commands, approvals and reported states can be recorded for your deployment, so you can show what changed, when, and on whose authority. Before you deploy ## Physical control is an operational decision. Confirm the selected paths, supporting systems and failure behaviour in the actual environment. No generic drawing can substitute for this assessment. 1. **Operational control centres and essential assets**Use sector Blueprints to examine actual systems, not a one-size-fits-all architecture. 2. **Remote facilities and telemetry links**Identify public-service consequences and restoration priorities. 3. **Supplier access and maintenance crossings**Prove local operation and communication dependencies before selecting remote-site isolation. 4. **Business-network dependencies supporting essential services**Assess applicable assurance obligations without treating Control as automatic compliance. Control governs the selected paths in your plan. It does not inspect traffic, and wireless, cellular and other routes outside the plan need their own controls. ### Straight answers No. They detect, filter and investigate. Control adds a physical way to act on the selected paths when your people, or rules you have agreed, decide to. No. It changes whether a selected path is connected. It does not read or change what travels on it. It can, which is why the dependencies, safe states and restoration steps for each path are agreed and tested with your operations and safety owners before anything goes live. It controls selected connectivity. Disconnecting a path removes the connections an AI system was using and gives people an independent way to intervene. It does not necessarily stop a model or process running locally. No. Control governs connections. Keeping data physically offline is Offline Secure Storage®, a separate Firevault product that can sit alongside Control. Yes. Start with one connection: a supplier route, an IT–OT crossing, or the path to one critical system. Your next step ## Start with one critical connection. Begin with one operational connection. Agree its purpose, intervention authority, dependencies and the checks that make restoration acceptable. Discuss your Control requirements (https://fire-vault.com/contact?subject=control) Or explore the nine Control Modules first: https://fire-vault.com/control-modules Discuss requirements: https://fire-vault.com/contact?subject=control Speak to the team: https://fire-vault.com/contact?subject=control ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/cni-control#webpage", "url": "https://fire-vault.com/cni-control", "name": "CNI Control", "description": "Assess physical control of selected essential-service paths, with operational ownership, public-service consequences and tested restoration procedures.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-home.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/cni-control#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/cni-control#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "CNI Control", "item": "https://fire-vault.com/cni-control" } ] } ] ```