Generated from the published register, the same source the interactive Tower Model reads. Illustrative reference figures for the archetype, not measurements of any agency — substituting real values is the first act of adoption.
The Cyber Terrain Overlay for the Federal Reference Agency archetype: every asset on the terrain, the layer that owns it, whether it is key terrain or a decisive point, and the maneuvers emplaced on it. Defensive Weight is Criticality × Exposure.
Mission services
| ID | Mission | Note |
|---|---|---|
MS-1 | Public Service Delivery | Citizen-facing intake and status. Statutory availability floor applies. |
MS-2 | Case Adjudication | Internal processing of mission records. The corpus the campaign exists to protect. |
MS-3 | Open Data Publication | Public data pipelines and open API. Integrity matters more than confidentiality. |
MS-4 | Financial Processing | Fee and payment handling. Fraud-targeted. |
MS-5 | Security Operations | The defense itself, treated as a mission service because its loss blinds everything else. |
T1 · Identity
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-01 | ICAM / Policy Decision Point Brokers every request. Compromise confers control of movement everywhere else. | Identity plane | Key terrain · decisive point | 5 | 4 | 20 | M3 M2 M8 |
A-02 | Phishing-Resistant MFA The control M3's indicator is tested against. | Identity plane | Key terrain | 4 | 5 | 20 | M3 |
A-03 | PKI / PIV Credential issuance and binding root. | Identity plane | Key terrain | 4 | 3 | 12 | M3 M2 |
A-04 | Privileged Access (PAM / JIT) Standing privilege elimination depends on it. | Identity plane | Key terrain · decisive point | 5 | 3 | 15 | M3 M4 |
T2 · Devices
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-05 | Mission-Staff Workstations EDR-covered fleet. The entry ford for most engagements. | Internal · mission-processing tier | — | 3 | 4 | 12 | M2 M4 M7 |
T3 · Networks
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-06 | DDoS Mitigation / CDN Availability defense at the edge. | TIC 3.0 edge · perimeter | — | 3 | 5 | 15 | M1 M6 |
A-07 | Web Application Firewall Request-level inspection tuned to the application. | TIC 3.0 edge · perimeter | — | 3 | 5 | 15 | M2 M4 |
A-08 | TIC 3.0 Trust-Zone Gateway Egress control and inspection. Holds several denied paths. | TIC 3.0 edge · perimeter | Key terrain | 4 | 5 | 20 | M4 M2 M8 |
A-09 | Load Balancer | Public-facing mission tier | — | 2 | 5 | 10 | M2 M6 |
A-10 | Microsegmentation Fabric East-west deny by default. The barrier several reachability results rest on. | Internal · mission-processing tier | Key terrain | 4 | 2 | 8 | M4 M8 |
T4 · Applications and Workloads
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-11 | Public Service Portal Statutory availability floor applies. Cannot be degraded without legal consequence. | Public-facing mission tier | Key terrain | 5 | 5 | 25 | M2 M6 M1 |
A-12 | Secondary Portal | Public-facing mission tier | — | 3 | 5 | 15 | M2 M6 |
A-13 | Case Filing Service | Public-facing mission tier | — | 4 | 5 | 20 | M2 M6 |
A-14 | Public Data / Open API Integrity-critical rather than confidentiality-critical. | Public-facing mission tier | — | 2 | 5 | 10 | M2 M5 |
A-15 | Case Processing System The mission workload. | Internal · mission-processing tier | Key terrain | 5 | 3 | 15 | M2 M4 M6 |
A-16 | CI/CD Pipeline Decisive point. Poisoning it envelops everything downstream. | Internal · mission-processing tier | Key terrain · decisive point | 5 | 3 | 15 | M2 M7 M9 |
T5 · Data
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-17 | Sensitive Mission Records The crown jewel. The objective the campaign exists to protect. | Data tier | Key terrain · decisive point | 5 | 2 | 10 | M2 M5 M6 |
A-18 | PII Store Privacy terrain. Holding more of it is itself the risk. | Data tier | Key terrain | 5 | 2 | 10 | M2 M5 |
A-19 | Financial Data Fraud-targeted. | Data tier | Key terrain | 4 | 2 | 8 | M2 M5 M6 |
A-20 | Object Storage (S3 Buckets) Frequent source of incidental and derived holdings. | Data tier | — | 3 | 3 | 9 | M2 M5 |
A-21 | Audit Logs Retention must exceed plausible dwell or reconstruction cannot reach the entry point. | Data tier | Key terrain | 4 | 2 | 8 | M2 M8 |
T6 · Operational Technology
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-26 | Building Management System Physical-effect system. Cannot be patched or restarted on the defender's schedule. | Operational technology | — | 3 | 3 | 9 | M4 M2 |
A-27 | Physical Access Control System Bridges T6 and T8. Its telemetry is an intelligence source, not an audit artifact. | Operational technology | Key terrain | 4 | 3 | 12 | M4 M1 |
A-28 | Engineering Workstations The path by which enterprise compromise becomes physical consequence. | Operational technology | Key terrain · decisive point | 4 | 2 | 8 | M4 M7 |
T7 · Workforce
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-29 | Privileged Administrators Role, not person. Population size is part of the terrain picture. | Workforce | Key terrain · decisive point | 5 | 4 | 20 | M3 M2 M7 |
A-30 | Mission Caseworkers Large population with direct access to the record corpus. | Workforce | Key terrain | 4 | 4 | 16 | M5 M2 |
A-31 | Contract Support Staff Equivalent reach to staff, different lifecycle and vetting. | Workforce | — | 3 | 4 | 12 | M3 M8 |
A-32 | Approval Authorities Indirect access role — compromise yields authorization rather than data. | Workforce | Key terrain | 4 | 3 | 12 | M3 M6 |
T8 · Facilities
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-33 | Primary Data Center Environmental sustain period must satisfy the recovery objectives of everything housed here. | Facilities | Key terrain | 5 | 2 | 10 | M2 M4 |
A-34 | Regional Field Offices Widest physical attack surface, thinnest supervision. | Facilities | — | 2 | 4 | 8 | M2 M4 |
A-35 | Alternate Recovery Site Must have carried the mission, not merely be documented as able to. | Facilities | Key terrain | 4 | 1 | 4 | M11 M2 |
T9 · Supply Chain
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-36 | Cloud Service Provider Inheritance boundary. Customer responsibilities need owners and operational moves. | Supply chain | Key terrain | 5 | 3 | 15 | M2 M8 |
A-37 | Managed Service Provider Reaches production. Severance must be within the agency's own control. | Supply chain | Key terrain · decisive point | 4 | 4 | 16 | M3 M4 M8 |
A-38 | Software Build Dependencies Provenance and contents are different questions and both are required. | Supply chain | Key terrain | 4 | 3 | 12 | M2 M6 M9 |
A-39 | Hardware and Firmware Vendors Where provenance verification is hardest and substitution least visible. | Supply chain | — | 3 | 2 | 6 | M2 M9 |
TX · Cross-Cutting
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
A-22 | SIEM / SOC Platform Visibility & analytics — reconnaissance. | Visibility & automation | Key terrain | 4 | 2 | 8 | M1 M7 |
A-23 | SOAR Platform Automation & orchestration — mobility. | Visibility & automation | — | 3 | 2 | 6 | M7 M8 |
A-24 | Threat Intelligence / CISA-JCDC Feed Feeds M1 and M9. The spoiling attack window depends on it. | Visibility & automation | — | 3 | 3 | 9 | M1 M9 |
A-25 | Hunt Team Tooling The counterattack force's instrument. | Visibility & automation | — | 3 | 2 | 6 | M7 M10 |
EXT · External actors
| ID | Asset | Zone | Terrain | Crit | Exp | Weight | Maneuvers |
|---|---|---|---|---|---|---|---|
X-01 | Public / Mission Users External actor. Citizens and businesses. | Internet · external actors | — | 0 | 5 | — | M3 M6 |
X-02 | External Partners External actor. Contractors and other agencies. | Internet · external actors | — | 0 | 5 | — | M3 M4 |
X-03 | API / Open-Data Consumers External actor. Public data pipelines. | Internet · external actors | — | 0 | 5 | — | M2 M6 |
X-04 | Threat Actors Adversary positions: nation-state collection, fraud rings, ransomware crews. Modeled as terrain occupants, not as assets. | Internet · external actors | — | 0 | 5 | — |