Defence in Depth — the Swiss-Cheese model

Every layer of controls has holes. Your job isn’t to make risk zero — it can’t be — it’s to make sure the holes never line up, so an attacker’s journey to the core takes long enough to be detected.

Narration

Choose a scenario to see how misaligned “cheese holes” buy defenders time — and how aligned ones cause a breach.
🛰 Detection windowdelay: 0.0s

Scoreboard

0
Attacks
0
Contained
0
Breaches
–
Best delay

Layers

Physical Administrative Technical CIA triad Attack path

    Scenarios

    The red trace is the attacker. Radial moves punch through a gap; the circling moves are the attacker searching for the next gap — that searching is the delay defenders rely on.

    Threat risk matrix

    IMPACT ▲
    LIKELIHOOD ▶
    Placing a control that mitigates a threat drags it left (less likely). Some controls soften impact instead. Hover a threat for details.

    Your controls

    Drag onto a matching-colour gap; click a plug for a refund. More options than gaps, more gaps than budget — buy the longest possible path: the attacker gives up when the SOC timer hits zero.