Layered-Defense Gap Alignment¶

← Back to Hazard Exposure & Uncontained Harm

Safeguards appear adequate in isolation but share decisive weaknesses or align into a complete route from initiating condition to unacceptable harm.

37 mechanisms across 3 solution archetypes. This is a recurring problem pattern within Hazard Exposure & Uncontained Harm; the mechanisms below inherit it from the primary archetype they instantiate.

Because this set contains more than 30 mechanisms, it is divided by form family—the concrete kind of thing a practitioner deploys, enacts, maintains, or convenes. This is a browsing subdivision only; it does not change the inherited problem classification. Click a form below to jump to its fully visible section.

Form family	Mechanisms	Description
Analysis, Modeling & Optimization	6	A calculation, model, estimator, diagnostic, comparison, simulation, or optimization that transforms inputs into an inference, prediction, recommendation, or formal result.
Assessment, Review & Assurance	7	A bounded evaluation of existing evidence, work, compliance, or readiness that produces a finding, approval, correction, or disposition.
Control, Automation & Runtime	1	A state-dependent executable mechanism that senses, triggers, schedules, filters, throttles, routes, or actuates during operation.
Decision, Gate & Allocation	1	A bounded selection, disposition, routing, admission, prioritization, matching, or allocation among eligible alternatives.
Experiment, Test & Rehearsal	9	An active probe, controlled variation, simulated condition, or practiced execution used to generate evidence or readiness.
Interface, Display & Cue	1	A user-facing perceptual surface or interactive affordance that presents status, options, warnings, prompts, or controls.
Monitoring, Sensing & Alerting	5	Ongoing or repeated observation of actual state that emits measurements, indicators, dashboards, surveillance signals, or alerts.
Record, Log & Register	1	A durable, usually accumulating account of actual events, decisions, custody, exceptions, or state transitions whose value depends on history, provenance, or accountability.
Representation, Specification & Plan	2	A non-executable information artifact that externalizes understood, desired, or future structure, including maps, matrices, templates, checklists, specifications, reports, plans, and schedules.
Rule, Policy & Commitment	1	A standing constraint, permission, default, threshold, quota, obligation, right, or conditional action rule governing future behavior.
Structure, Architecture & Configuration	3	An enduring physical, digital, spatial, material, or organizational topology, partition, boundary, component arrangement, or configured state.

Analysis, Modeling & Optimization¶

A calculation, model, estimator, diagnostic, comparison, simulation, or optimization that transforms inputs into an inference, prediction, recommendation, or formal result.

6 mechanisms · View full form family

Attack Graph Analysis — Maps the multi-step routes an adversary can chain from an entry point to a protected asset, exposing the sequences of conditions that make a whole attack conduct.
Boolean SAT or SMT Path Search — Encodes the whole conduction logic as a Boolean or SMT formula and lets a solver either exhibit a dangerous state combination or prove that none exists.
Fault Tree with AND-Gate Logic — Deduces, top-down through AND and OR gates, the combinations of basic failures whose conjunction is sufficient to cause the top event, and enumerates them as minimal cut sets.
Layered Control Matrix — Lays every control against every threat pathway in a grid so open pathways, single points of coverage, and merely-redundant layers become visible at a glance.
Minimal Cut-Set Enumeration — Reduces a fault model to the complete list of minimal condition-sets — each the smallest combination that, occurring together, completes a route to the hazard.
Scenario or Monte Carlo Joint-State Sampling — Samples many correlated joint states to estimate how often an entire route conducts at once — the rare-coincidence probability that no single-factor analysis reveals.

Assessment, Review & Assurance¶

A bounded evaluation of existing evidence, work, compliance, or readiness that produces a finding, approval, correction, or disposition.

7 mechanisms · View full form family

Barrier Gap Walkthrough — Leaves the desk to inspect each barrier where it actually operates, replacing hypothesized holes with the real exceptions, bypasses, and named owners found on the floor.
Common-Cause Dependency Audit — Challenges the independence the redundancy math assumes by hunting the shared upstream driver that would fail several 'separate' barriers in the same instant.
Common-Cause Layer Audit — Hunts on paper for the shared vendor, feed, power source, or credential that secretly couples defensive layers the organization treats as independent.
HAZOP Joint-Deviation Review — Walks a multidisciplinary panel through guide-word deviations taken in combination, surfacing the joint deviations a single-parameter review would miss and owning the residual-risk call.
Model Checking and Reachability Analysis — Exhaustively explores a system's reachable states to prove the hazard state can never be reached — or returns the exact sequence that reaches it.
Near-Miss Trajectory Review — Reconstructs the path each real near-miss actually took through the layers and treats it as hard evidence that holes are already starting to align.
Swiss-Cheese Barrier Review — Walks one hazard through the whole defensive stack at a table, asking layer by layer where the same scenario could slip through — the fast first screen for aligned holes.

Control, Automation & Runtime¶

A state-dependent executable mechanism that senses, triggers, schedules, filters, throttles, routes, or actuates during operation.

1 mechanism · View full form family

Safety Interlock Chain — Wires several independent safety conditions to the hazard's energy source so that if any one is unmet, the system forces itself into a safe state without waiting for a human.

Decision, Gate & Allocation¶

A bounded selection, disposition, routing, admission, prioritization, matching, or allocation among eligible alternatives.

1 mechanism · View full form family

Multi-Factor Access Challenge — Guards a single access point by demanding several credentials of deliberately different kinds, so defeating one does not open the door.

Experiment, Test & Rehearsal¶

An active probe, controlled variation, simulated condition, or practiced execution used to generate evidence or readiness.

9 mechanisms · View full form family

Backup Restore Drill — Proves the last-resort recovery layer actually works by restoring from it under realistic conditions — turning an assumed backstop into a tested one.
Common-Mode Failure Probe — Deliberately fails a shared dependency to see how many 'independent' layers drop together — testing the independence the whole defense is betting on.
Digital-Twin Hazard Rehearsal — Rehearses a specific dangerous conjunction — with its real timing — inside a high-fidelity simulation, so the end-to-end route can be exercised without exposing the live system.
Full-Factorial Joint-State Test — Runs every combination of the governing state variables against the system and checks each one for the combination that lets the whole route conduct.
Independent Barrier Test Drill — Deliberately disables one barrier under controlled conditions to test whether a supposedly independent backup actually holds — and scores how healthy it really was.
Joint-Condition Fault Injection — Deliberately forces several fault conditions true at once in a sandbox and watches whether a complete failure path actually lights up.
Property-Based State-Sequence Testing — Generates thousands of random operation sequences, checks a safety invariant after every step, and shrinks any violation to the minimal history that breaks it.
t-Wise Combinatorial Interaction Testing — Covers every t-way combination of conditions with a compact test set, on the premise that dangerous conjunctions rarely need more than a few factors aligned at once.
Tabletop Breach Walkthrough — Gathers the real role-holders to talk through an escalating breach step by step, surfacing the seams between layers that only appear when the defense is exercised as a whole.

Interface, Display & Cue¶

A user-facing perceptual surface or interactive affordance that presents status, options, warnings, prompts, or controls.

1 mechanism · View full form family

Aligned Gap Heatmap — Renders the cross-layer gap matrix as a color-graded grid so the hazard paths where holes line up across every layer light up at a glance — and trip a stop threshold when they do.

Monitoring, Sensing & Alerting¶

Ongoing or repeated observation of actual state that emits measurements, indicators, dashboards, surveillance signals, or alerts.

5 mechanisms · View full form family

Canary or Tripwire Asset — A deliberately planted decoy that only an intruder would touch, so that any interaction with it is a high-confidence sign the outer layers have already been crossed.
Intrusion or Anomaly Alerting — Watches the protected system's live signals for the signature or the statistical shadow of a breach, and turns a detection into a timed, routed response before loss completes.
Latent Condition Rounds — Recurring scheduled rounds that watch defensive holes drift — widening, moving, or synchronizing — and trip a stop threshold before the drift lines them up into a path.
Layer Health Dashboard — A single at-a-glance view of whether each defensive layer is actually up, degraded, or down right now — so a silently failed barrier is seen before it's needed, not after.
Runtime Gate Co-Activation Monitor — Watches the live system for the moment too many gates on a route are simultaneously open, and raises the alarm before the last one closes.

Record, Log & Register¶

A durable, usually accumulating account of actual events, decisions, custody, exceptions, or state transitions whose value depends on history, provenance, or accountability.

1 mechanism · View full form family

Compensating Control Register — A living ledger of every place a required barrier is missing or weakened, the stand-in control put in its place, and the residual risk knowingly accepted — so gaps are owned, not forgotten.

Representation, Specification & Plan¶

A non-executable information artifact that externalizes understood, desired, or future structure, including maps, matrices, templates, checklists, specifications, reports, plans, and schedules.

2 mechanisms · View full form family

Bow-Tie Path Analysis — Puts one unwanted event at the centre and lays out the threat paths into it and the consequence paths out of it, making the barrier on each path explicit.
Bowtie Analysis with Layer Gaps — Diagrams preventive and recovery barriers on either side of a single top event and draws each barrier as a holed slice rather than a solid block, exposing where a threat could pass through.

Rule, Policy & Commitment¶

A standing constraint, permission, default, threshold, quota, obligation, right, or conditional action rule governing future behavior.

1 mechanism · View full form family

Decision Table or State Matrix — Tabulates every combination of the governing conditions against the action it demands, so the dangerous combination and the guard it must trigger are specified, not left implicit.

Structure, Architecture & Configuration¶

An enduring physical, digital, spatial, material, or organizational topology, partition, boundary, component arrangement, or configured state.

3 mechanisms · View full form family

Independent Interlock or Guard — Holds one gate on every hazardous route independently shut, so no conjunction of the other conditions can complete the path.
Network Segmentation Policy — Divides a network into isolated zones with only named, controlled crossings, so a breach in one segment cannot spread to the crown jewels.
Physical Security Zoning — Arranges physical space into concentric graded zones so reaching the asset means passing successively harder, differently-guarded boundaries under lengthening exposure.