rv-2026-0398Submitted by Priya Raman of Process Automation Analytics8 Sept 2026Google Cloud, scored under CIS Controls v8.1 and Northwind’s own standardsmatched to Event-driven data pipeline at 90%read from plant-telemetry-pipeline-lld-v1.0.pdf and plant-telemetry-pipeline-architecture.png
| Maps to | |||||||||
|---|---|---|---|---|---|---|---|---|---|
3.12 | Segment Data Processing and Storage Based on SensitivityThe telemetry dataset and the raw archive sit outside any service perimeter | Data | Security | PR.IR-01 · PR.DS-01 | High | Fail | Missing 3 cited, none proving it is built | Data Platform Engineering | 8 Oct 2026 |
8.9 | Centralize Audit LogsAudit logs stay in the project because it was never added to the organisation sink | Logging | Security | PR.PS-04 | High | Fail | Missing 3 cited, none proving it is built | Cyber Security | 8 Oct 2026 |
11.4 | Establish and Maintain an Isolated Instance of Recovery DataThe raw archive is the only recovery copy and it lives in the production project | Resilience | Security | PR.DS-11 | High | Fail | Missing 3 cited, none proving it is built | Cloud Platform Engineering | 8 Oct 2026 |
CAT-2 | Conditional services are used on their termsBigQuery is used outside its conditions of use | Estate fit | Estate fit | Service catalogue | High | Fail | Missing 1 cited, none proving it is built | Cyber Security | 8 Oct 2026 |
3.10 | Encrypt Sensitive Data in TransitThe device-to-gateway hop is encrypted only by implication | Data | Security | PR.DS-02 | Medium | Fail | Missing 4 cited, none proving it is built | Data Platform Engineering | 7 Nov 2026 |
AP-1 | Shared databaseShared database: telemetry-stream and Looker both reach plant_telemetry directly | Design pattern | Reliability | Design patterns | Medium | Fail | Missing 1 cited, none proving it is built | Process Automation Analytics | 7 Nov 2026 |
COST-4 | Spend is visible and attributedNo budget, alert or cost attribution | Cost | Cost | GCP Architecture Framework | Medium | Fail | Missing | Cloud Platform Engineering | 7 Nov 2026 |
MBSS-1 | The design names the baselines it is built to5 baselines apply and none is named in the design | Estate fit | Estate fit | MBSS baselines | Medium | Fail | Missing | Cyber Security | 7 Nov 2026 |
REL-2 | Recovery objectives are statedNo recovery time or recovery point objective is stated | Reliability | Reliability | GCP Architecture Framework | Medium | Fail | Missing 1 cited, none proving it is built | Process Automation Analytics | 7 Nov 2026 |
OPS-4 | Runbooks exist for the likely failuresNo runbooks are referenced | Operations | Operations | GCP Architecture Framework | Low | Fail | Missing | Cloud Platform Engineering | 7 Dec 2026 |
3.11 | Encrypt Sensitive Data at RestEvery store uses a customer-managed key with rotation | Data | Security | PR.DS-01 | Low | Pass | Data Platform Engineering | — | |
6.3 | Require MFA for Externally-Exposed ApplicationsLooker, the only user-facing component, sits behind corporate sign-in with MFA | Identity | Security | PR.AA-03 | Low | Pass | Identity Engineering | — | |
6.5 | Require MFA for Administrative AccessProject administration is limited to one group with security-key 2-Step Verification | Identity | Security | PR.AA-03 · PR.AA-05 | Low | Pass | Identity Engineering | — | |
12.2 | Establish and Maintain a Secure Network ArchitectureA three-subnet zone model with private nodes, denied egress and one documented inbound rule | Network | Security | PR.IR-01 | Low | Pass | Network Engineering | — | |
13.10 | Perform Application Layer FilteringCloud Armor and schema validation filter device traffic at the application layer | Network | Security | PR.IR-01 · DE.CM-01 | Low | Pass | Network Engineering | — | |
16.10 | Apply Secure Design Principles in Application ArchitecturesEach workload has its own service account scoped to the resources it touches | Application | Security | PR.PS-06 | Low | Pass | Process Automation Analytics | — | |
AP-2 | Third party in the data pathNo third party on the request path | Design pattern | Reliability | Design patterns | Low | Pass | Not assessed | Process Automation Analytics | — |
AP-4 | Snowflake environmentThe environment is reproducible | Design pattern | Operations | Design patterns | Low | Pass | Cloud Platform Engineering | — | |
CAT-1 | Every service is in the catalogue and permittedAll 10 services are in the catalogue and permitted | Estate fit | Estate fit | Service catalogue | Low | Pass | Not assessed | Cyber Security | — |
CAT-3 | Nothing depends on a service that is going awayNothing in the design is retiring or unassessed | Estate fit | Estate fit | Service catalogue | Low | Pass | Not assessed | Cyber Security | — |
CAT-4 | Data is held only where its class is permittedEvery store is assessed for the class it holds | Estate fit | Estate fit | Service catalogue | Low | Pass | Not assessed | Cyber Security | — |
COST-1 | Capacity follows demandThe always-on floor is a stated choice | Cost | Cost | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
COST-2 | Storage has a lifecycleStored data has a stated lifetime | Cost | Cost | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
OPS-1 | Infrastructure is defined as codeThe environment is defined as code | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
OPS-2 | Releases are staged and reversibleReleases are staged and can be withdrawn | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
OPS-3 | Monitoring reaches a personAlerts reach a named rota | Operations | Operations | GCP Architecture Framework | Low | Pass | Cloud Platform Engineering | — | |
PERF-1 | Latency and throughput targets are statedThe design states what it is built to serve | Performance | Performance | GCP Architecture Framework | Low | Pass | Process Automation Analytics | — | |
PERF-4 | Scaling bounds are definedScaling bounds are set | Performance | Performance | GCP Architecture Framework | Low | Pass | Process Automation Analytics | — |