EXECUTIVE DECISION BRIEF · SYNTHETIC ESTATE

Project Indigo

The page a security leader takes into the room. It is drawn from the same governed reading as the Cybersecurity transformation story, and it prints as a clean A4 one-pager. The code in its footer opens the verification surface with this brief's custody fingerprint.

EKSTROPI EXECUTIVE DECISION BRIEF
PROJECT INDIGO · OBS6 · CISO LENS
COMMITMENT Bring privileged access across the estate under governed control before the regulatory closure date. ONE COMMITMENT · ONE GOVERNED REALITY · MULTIPLE LEGITIMATE EXECUTIVE READINGS
CURRENT EXECUTIVE POSITION Deployment is progressing. Governed control of privileged access is not yet demonstrated.
DIRECTIONExposure holding since prior assessment
EVIDENCECurrent through 12 Mar
MATERIALITY71% evidenced by weight
34 /100 ESI
Materially exposed The current admitted evidence does not demonstrate that privileged access is under governed control.
ESI TRAJECTORY
51OBS3
44OBS4
34OBS5
34OBS6 · NOW
30N+1 · FORECAST
GOVERNED PROGRAMME REALITY · THIS PROGRAMME'S OWN STRUCTURE
IDENTITYDirectory not reconciledOrphaned and shadow admin accounts are not yet counted against the estate.
PRIVILEGED ACCESSPAM live for 82% of accountsCoverage is reported. Enforcement is not the same as coverage.
CROWN-JEWEL SYSTEMRuntime enforcement unprovenIndependent evidence that the control is enforced on the payments platform is unavailable.
EXCEPTIONS23 standing exceptions openBreak-glass and service-account paths currently bypass the control.
THIRD PARTY3 suppliers retain privileged accessVendor privileged routes are attested, not evidenced.
OBLIGATIONRegulatory closure in 60 daysAudit expects demonstrated closure, not reported completion.
REQUIRES YOUR ATTENTION
01
Prove enforcement on the crown-jewel systemDeployment is reported; runtime enforcement is not independently evidenced.
02
Close or govern the standing exceptions23 break-glass and service-account paths currently bypass the control.
03
Reconcile privileged identitiesOrphaned and shadow admin accounts are not counted against the estate.
DECISION BOUNDARY The programme is defensible — but only conditionally. Current evidence does not justify declaring closure, and does not yet support standing behind it to the regulator.
WHAT WOULD CHANGE THE POSITION
◇  Runtime enforcement on the crown-jewel system is evidenced ◇  Standing exceptions are closed or brought under governed control ◇  Privileged identities are reconciled against the directory ◇  Third-party privileged access is evidenced, not attested
THE DECISION IN FRONT OF THE ROOM The decision before leadership: report the programme on track, tighten its closure conditions, or hold the regulatory sign-off. The current evidence justifies neither declaring closure nor standing behind it unconditionally. The four conditions above state what would move the position.
58 GOVERNED RECORDS · 6 FINDINGS · 1 SEALED DECISION · 71% EVIDENCED BY WEIGHT · THROUGH 12 MAR EVERY FIGURE RESOLVES TO A SOURCE RECORD. receipt 3f9c1a70… · sha256:d84b2e05… SYNTHETIC ESTATE — NO REAL CLIENT DATA REPRESENTED
SCAN · VERIFY CUSTODY