Risk Landscape Map¶
Artifact — instantiates Phase-Space Mapping
Overlays risk intensity across states so safe, fragile, hazardous, and catastrophic regions become visible.
A Risk Landscape Map is an intensity overlay. It takes an existing layout of states and colors each region by how dangerous it is — safe, fragile, hazardous, catastrophic — adding a consequence-and-likelihood gradient rather than any new geometry or paths. Its defining move is shading, not routing: it says how bad each state is and where the cliffs and thresholds sit, so a region that looks acceptable on a status board is re-seen as sitting one step from a catastrophic drop. It marks the no-go regions distinctly, draws the boundaries where fragility spikes, and shades the states where the risk itself is uncertain. It does not tell you how to get anywhere; it tells you which ground is dangerous to stand on.
Example¶
A cloud security team overlays risk on their infrastructure's state space. The states are defined by three axes they already track: exposure (private or internet-facing), privilege (ordinary or root), and observability (monitored or blind). The map shades a private, monitored, ordinary-privilege service deep green — safe. It shades an internet-facing, root, unmonitored service deep red and marks it a forbidden region: a state the system should never be allowed to occupy, because a compromise there is both catastrophic and invisible. Between the two, the map draws the constraint boundaries where fragility jumps — the threshold from monitored to blind, past which any incident goes undetected. And it shades in amber the states where the team honestly cannot score the risk yet: a newly acquired subsidiary's systems whose exposure is not yet inventoried. Now defense effort sorts itself — patrol the amber, wall off the red, and watch the thresholds — without anyone having to argue about it from a flat asset list.
How it works¶
- Take a base layout — start from an existing state space; the risk map is an overlay, not a fresh coordinate system.
- Score each region — assign a risk value (consequence, or consequence times likelihood, or a severity tier) to each state or region.
- Draw the tiers and cliffs — render iso-risk contours and the boundaries separating safe, fragile, and hazardous bands so the gradient is visible.
- Mark forbidden and uncertain — flag catastrophic states as no-go, and shade distinctly the regions where the risk score itself is not yet known.
Tuning parameters¶
- Risk metric — pure worst-case consequence (conservative, ignores likelihood) versus expected loss (balanced, needs probability estimates).
- Number of severity tiers — few bands (clear, coarse) versus many (nuanced, harder to read and to justify).
- Contour resolution — how finely the risk gradient is drawn; fine contours imply a precision the underlying scores may not have.
- Forbidden-region breadth — how conservatively no-go regions are drawn; broad regions prevent harm but block beneficial transitions.
- Uncertainty shading threshold — how unknown a region's risk must be before it is marked fragile rather than scored, trading honesty against a cleaner picture.
When it helps, and when it misleads¶
Its strength is making danger visible before entry: it prioritizes defensive effort by region, exposes fragile precursor states that sit just short of catastrophe, and gives a shared picture of where the cliffs are. It is the overlay that turns "which asset is riskiest?" into "which regions of our state space are hazardous, and where are the thresholds?"[n1]
Its signature failure is false precision — a crisp heatmap drawn over risk scores that are mostly guesses, lending a colorful map more authority than its inputs deserve. Its mirror is over-broad forbidden regions that, drawn too cautiously, wall off beneficial moves along with dangerous ones. The classic misuse is letting a vivid map substitute for actually measuring risk. The guarding discipline is to show plainly where the risk scores are evidence and where they are assumption — which is exactly what the uncertainty shading is for — and to keep every forbidden region tied to a stated consequence rather than a reflex.
How it implements the components¶
forbidden_state_region— it marks the catastrophic states as distinct no-go regions, separated from merely hazardous ones.constraint_boundary— it draws the thresholds separating safe, fragile, and hazardous tiers, showing where the risk gradient spikes.trajectory_uncertainty_band— it shades the states whose risk is itself uncertain, so unknown danger is visible rather than silently scored as safe.
It does not draw the paths between states (trajectory_map, reachable_state_set) — that's Trajectory Mapping Diagram, its nearest twin: the risk map shades where the danger is, the trajectory diagram routes movement through it. It also does not render the raw dynamical geometry (state_variable, attractor_region) — that's Phase Space Plot — nor wire states to permitted controls (state_transition_relation, intervention_zone, state_observation_proxy) — that's Control-State Diagram.
Related¶
- Instantiates: Phase-Space Mapping — supplies the risk-intensity overlay that separates safe ground from cliffs.
- Consumes: Phase Space Plot — supplies the base state layout the risk gradient is shaded onto.
- Sibling mechanisms: Phase Space Plot · Trajectory Mapping Diagram · Control-State Diagram · Attractor Basin Analysis · Reachability Analysis · Behavioral State Space · Scenario State Map
Editorial Notes¶
Form Classification¶
Form family: Representation, Specification & Plan
Rationale: Risk Landscape Map operates as a static representation, map, specification, schema, or prospective plan that externalizes information because it overlays risk intensity across states so safe, fragile, hazardous, and catastrophic regions become visible.
Independent corroboration: The frozen evidence defines Risk Landscape Map as 'Overlays risk intensity across states so safe, fragile, hazardous, and catastrophic regions become visible', so its operative form is Representation, Specification & Plan.
Nearest alternative: Analysis, Modeling & Optimization — Risk Landscape Map includes features of an analytical, modeling, inference, comparison, or optimization procedure that derives insight or a solution, but its defining operation is a static representation, map, specification, schema, or prospective plan that externalizes information.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Systems Thinking & Cybernetics
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Representing multiple hazards, likelihoods, consequences, vulnerabilities, and interdependencies as one changing landscape is fundamentally a systems-level risk model. Data visualization, engineering risk management, disaster profiling, and physical field metaphors contribute the map’s operational form.
Related originating lineages:
- Data Science & Analytics — data_science contributes operational scoring, spatial analytics, representation, and recalibration to the mechanism’s formative or independently convergent form; that contribution does not displace the primary systems_cybernetics lineage.
- Disaster Management & Risk Reduction — disaster_management contributes preparedness, continuity, hazard containment, and recovery practice to the mechanism’s formative or independently convergent form; that contribution does not displace the primary systems_cybernetics lineage.
- Engineering & Design — engineering_design contributes lifecycle design, safety margins, rollback, verification, and systems assurance to the mechanism’s formative or independently convergent form; that contribution does not displace the primary systems_cybernetics lineage.
- Physics — physics contributes powers-of-ten reasoning, scale comparison, and rough quantitative estimation to the mechanism’s formative or independently convergent form; that contribution does not displace the primary systems_cybernetics lineage.
Review resolution: The blind reviewers disagreed on primary lineage (data_science versus systems_cybernetics); authoritative or primary research supports systems_cybernetics as the best historical origin. Representing multiple hazards, likelihoods, consequences, vulnerabilities, and interdependencies as one changing landscape is fundamentally a systems-level risk model. Data visualization, engineering risk management, disaster profiling, and physical field metaphors contribute the map’s operational form. The cited WHO, Strategic Risk Assessment for All Hazards; NASA Risk Management Handbook directly supports the defining operation used in that choice. All independently supported contributing domains are retained without an arbitrary cap, while domain_reach=multi_domain records later applicability separately from provenance.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Researched adjudication after independent review; medium confidence.
Sources consulted:
Notes¶
[n1] The attack surface is the set of points and states through which a system can be compromised; defense in depth layers controls so that no single failure reaches a catastrophic state. A risk landscape map is the spatial expression of both — it shades which regions of the system's state space are exposed and how severe a foothold there would be. ↩