Asset & Zone Governance

Classification helps to identify true requirements

Trust level of authentication is what matters for authenticated identity—across digital data and physical areas.

1. What do we know of our Assets?

Moving from uncertainty and vendor lock-in to governed classification and a Single Version of the Truth.

What do we know? (The Questions)

  • [ ? ] Top Secret or just Internal?
  • [ ? ] Business Critical or Nice to Have?
  • [ ? ] Has or is it Sensitive?
  • [ ? ] On-Premise more secure than Cloud?
  • [ ? ] Do we have the required control?
  • [ ? ] Is authorization arranged & simple?
  • [ ? ] Do we have a vendor lock-in?
  • [ ? ] What if the system fails?
  • [ ? ] Do we have the Single Version of the Truth?

What should be the answer (Our Architecture)

  • [ ✓ ] We have classification on all assets in place
  • [ ✓ ] We have the applicable controls in place
  • [ ✓ ] No sensitive data in standard Production
  • [ ✓ ] Cloud Secure Cell offers best security controls
  • [ ✓ ] Guaranteed availability with zero-disruption rotation
  • [ ✓ ] Key assets have their own isolated security controls
  • [ ✓ ] Key assets have strictly limited access (20 Max)
  • [ ✓ ] Half-products: swap any product with an alternative
  • [ ✓ ] Disaster recovery & roadmap away from duplication

2. The 5 Classification Levels & Lifecycle Flow

Click any tier in the pyramid to inspect its controls. When Top Secret or Sensitive data is published (e.g., quarterly results upon release), it slides down the Sharing / Making Public chute.

EFFORT TOP SECRET SENSITIVE CONFIDENTIAL INTERNAL PUBLIC SHARING / MAKING PUBLIC
Click any layer in the pyramid to inspect its controls & qualification parameters
Level 5 — Crown Jewels

TOP SECRET

Mission-critical intellectual property, key vaults, core source code, and pre-publication M&A or quarterly figures. Lives inside a Tri-Block Cloud Secure Cell in volatile RAM only.

  • Identity Trust: Top (Hardware FIDO2 WorkPermit)
  • Intellectual Property: Critical
  • People Access: 20 Max (Individual Authorization)
  • Reputation Impact: Huge

3. True Qualification Impact Matrix

True qualification impacts seven angles simultaneously—and prevents unnecessary cost from incorrect classification.

Classification Identity Trust Intellectual Property Entitlement Business Effort People Access Impact Reputation HSSE Impact*
TOP SECRET TOP CRITICAL Individual Authorization HIGH 20 Max HUGE DEPENDS*
SENSITIVE (GDPR) TOP LOW Individual Authorization HIGH 20 – 200 HUGE DEPENDS*
CONFIDENTIAL HIGH HIGH Complex Rules & Attributes MEDIUM 20 – 1,000 HIGH DEPENDS*
INTERNAL MEDIUM LOW Authenticated LOW Staff & Contractors MEDIUM DEPENDS*
PUBLIC LOW LOW Low MEDIUM All people ???? (Can be HIGH) DEPENDS*

Why PUBLIC requires higher effort & carries high reputation risk (????): Publishing information externally requires formal signing on behalf of the organisation by an authorised official holding a specific role (identified by an internally known personal number or their real name), combined with cryptographic integrity sealing so the message cannot be altered by third parties. Because the seal proves origin and integrity undeniably, reputation impact for Public can be high—especially when incorrect data is provided and signed by the organisation.

*DEPENDS (HSSE Impact): Can be huge at any tier! There is no golden rule—operational or public telemetry can still carry critical physical safety consequences.

4. Classification Impact on Locations and Areas (PLACS)

Physical doors, turnstiles, control rooms, and logical server zones follow the exact same cryptographic trust hierarchy.

Wols CA / SA Mundus Area Classification Tiers (Platinum, Gold, Silver, Bronze)
Operational & Area Authentication Controls — Visual Blueprint
Tier 4 — Lowest Quantity

PLATINUM AREA

Trust in Identity: Top
Entitlement: Work Permits & Individual
Controls: Command centres, high-security vaults, airlocks & emergency response.

Tier 3 — Restricted

GOLD AREA

Trust in Identity: High
Entitlement: Complex Rules & Attributes
Controls: Full-height turnstiles, biometric/mmWave liveness, SOC monitoring.

Tier 2 — Controlled

SILVER AREA

Trust in Identity: Medium
Entitlement: Simple Rules & Attributes
Controls: Optical speed gates, mobile patrol, CCTV & zone badges.

Tier 1 — High Quantity

BRONZE AREA

Trust in Identity: Low
Entitlement: Generic Rules & Core Attributes
Controls: Standard keypad/Smart QR doors & perimeter cameras.