01
Foundations
Infrastructure that explains who can do what.
The work begins with boundaries, identities and operational responsibilities before selecting controls or adding implementation complexity.
- Access model
- Environment boundaries
- Deployment path
- Recovery assumptions