Daedalus
N
Northwind
Home
Reviews
Design
Blueprints
History
Settings
Google Cloud
·
CIS Controls v8.1
3
CS
Light
Auto
Dark
Northwind
/
Reviews
/
Supplier Onboarding Portal
/
Close-out
Close out findings
Google Cloud
Supplier Onboarding Portal · owned by Elena Marchetti, Procurement Digital · reviewed 19 Aug 2026 · answers are recorded against this review
Secure by design
78
78
/ 100
ceiling 93 once every finding is closed
0 closed
0 accepted as gaps
9 open
0 of 9 findings answered
Evidence
any file
Drop evidence here
Any file: an applied plan, a configuration export, a test result from the running environment.
or click to choose one
The team’s evidence pack
Procurement Digital uploaded these against this review
All
9
Open
9
Closed
0
Accepted
0
6.3
Security
Open
high severity
Supplier accounts sign in with a password alone
The portal is reachable from the internet by 9,800 supplier contacts and holds their companies' bank account details and certificates, yet Identity Platform is configured with the e-mail and password provider only. The document states that multi-factor authentication was deferred for convenience of registration. A phished or reused supplier password gives full access to that supplier's application, including the bank details a buyer will approve.
11.4
Security
Open
medium severity
Backups are isolated in a separate project, but a restore has never been performed
Daily backups go to a Backup and DR vault in nw-proc-backup with enforced retention and independent IAM, which is the isolation the safeguard asks for. The document then states that no restore from the vault has been performed, so nothing shows the recovery copy is usable within the portal's availability target.
12.2
Security
Open
medium severity
No documented zone model, and any internet destination is reachable from the application subnet
The database is private, but the VPC around it is the default layout with default firewall rules and no documented subnets, rules or routes. Both Cloud Run services send all traffic through Cloud NAT with no egress rules, so a compromised service can reach any host on the internet to exfiltrate supplier bank details, even though the only legitimate external destination is the VIES endpoint.
COST-4
Cost
Open
medium severity
No budget, alert or cost attribution
Nothing labels the workload for chargeback or alerts anyone when spend moves. Cost is discovered at the end of the month by whoever reads the invoice.
CAT-1
Estate fit
Open
medium severity
1 component is not in the service catalogue
VIES VAT validation (European Commission web service) does not match anything the group has assessed. Either the service has never been through assessment, or the design has named it in a way the catalogue does not recognise.
MBSS-1
Estate fit
Open
medium severity
6 baselines apply and none is named in the design
MBSS-GCP-PROJ Google Cloud project, MBSS-GCP-RUN Cloud Run service, MBSS-GCP-SQL Cloud SQL instance, MBSS-GCP-GCS Cloud Storage bucket, MBSS-NET Internet-facing entry point, MBSS-IAM Identity and access govern the services used here, with 36 mandatory settings between them. The design never says which version it was built to, so a reviewer cannot ask for the settings that would prove it.
AP-1
Reliability
Open
medium severity
Shared database: portal-web and review-console both reach supplier-db directly
portal-web and review-console depend on the same schema, so neither can change it alone and a fault in either can exhaust the connections the other needs. The usual repair is to let one service own the store and give the other an interface to it.
PERF-3
Performance
Open
low severity
Every asset is fetched from the application tier
No content delivery network appears in the design, so each image, script and stylesheet is served from the region and every user pays the distance to it on every page.
OPS-4
Operations
Open
low severity
No runbooks are referenced
The design names failure modes but no written procedure for them, so the response depends on who happens to be on call.
The architecture as it now stands
Evidenced and built
Accepted gap
Still open
15 components · 16 flows
Press enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.
Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.
0 built
0 gaps
11 open
9 findings still open. Evidence closes a finding; anything the team cannot change is accepted as a gap with an approver and a review date.
Export findings register (CSV)
Download updated architecture