Inventories list systems, not every connection into them.
Essential systems have more routes into them than anyone planned. Which ones need to stay open?
Reduce the number of connections that can reach essential systems, so fewer routes stay open by default.
Infrastructure & Critical Systems
Array, Isolate, Unlink
4 industry Blueprints
Assessed for your environment
01 · The problem
Critical System Exposure Reduction: what goes wrong.
Essential systems, from control centres to payment platforms, are reachable through more connections than their owners realise. Each connection that stays open by default is one more way in.
Why existing controls may leave it open
Connections added for projects or support are rarely removed.
Software controls on essential systems can be changed by anyone with enough access.
02 · Firevault's approach
Control the selected connections.
Firevault works with system owners to identify every connection into an essential system and decide which must remain, which can exist on request and which can be disconnected. Selected connections are placed under physical control.
03 · Before and with Control
See the connections change.
The connections that were always available, and their intended state once Control is in place. Your own design depends on your environment.
Concept view · CP-12 Critical System Exposure ReductionFromBusiness network
- Project and support connectionsAlways connected
- Approved operational accessAlways connected
- Required service connectionAlways connected
ToEssential system
A simplified concept, not a network design. Device placement, connections and operating sequences are designed for your environment in Control Studio.
Request a Studio design session04 · The outcome
What changes for you.
What this Plan does not do: This Plan does not harden the system itself or replace vulnerability management. Routes outside the assessed scope remain the customer's responsibility.
- Fewer connections can reach essential systems by default.
- Each remaining connection has an owner and a reason.
- The system keeps the connections it needs to operate.
05 · Where it applies
Industries where this Plan fits.
Each industry Blueprint applies this Plan to its own systems, dependencies and safety considerations.
Other Plans in Infrastructure & Critical Systems
06 · Your environment
How many connections can reach your most essential system right now?
Firevault reviews the connections in your own environment with the people who own them, then designs the Plan for you in Control Studio.