BR
breachready.mvde.app
Phase: Steady state
All systems operational
EXTERNAL / UNTRUSTED ZSCALER ZERO TRUST PERIMETER MVDE BOUNDARY — COLORTOKENS XSHIELD MICROSEGMENTATION POLICY ENFORCED ★ CROWN JEWEL ASSETS DATA RESILIENCE TIER machinery AI ATTACK AI attacker CTR USER Contractor RMT STAFF Remote staff ZSCALER SASE ZIA · ZPA · SD-WAN User-to-app access control No implicit network trust CROWDSTRIKE Falcon EDR · console Endpoint detection Fires alerts to SIEM SIEM / SOAR Splunk · Sentinel Evaluates against playbook Triggers Xshield via API COLORTOKENS XSHIELD Microsegmentation · policy engine Receives trigger via SIEM API Pushes containment policy FIN APP Finance app ⚠ breach target ERP CORE ERP system ★ crown jewel FIN DB ★ sensitive CUST DATA ★ PII · GDPR CONFIG ★ secrets CRM SRV CRM server WEB TIER Web tier OT SYS OT systems air-gapped · · · XSHIELD POLICY ENFORCED ACROSS ALL WORKLOAD COMMUNICATION PATHS · · · RUBRIK Security Cloud · DSPM Crown jewel protection ERP · CRM · Financial data VEEAM Data Platform · MVB Operational MVB restore Finance · Web tier · DORA ★ CROWN JEWELS DB Financial records Customer PII · Config Rubrik DSPM protected IMMUTABLE BACKUP Config · Secrets vault Clean restore points Write-once · Veeam managed MVDE STATUS 100% OK XSHIELD server→server blocked XSHIELD server→server blocked ZPA: user→app only ⚠ EDR ALERT FIRED CrowdStrike Falcon · T1059 Dispatching to SIEM → PLAYBOOK MATCHED Evaluating against pre-tested rules Calling Xshield API → CONTAINMENT POLICY Pre-modelled policy activated Pushing to Finance app ↓ XSHIELD · QUARANTINED THREAT HUNT Scanning backup chain Locating clean restore point → MVB RESTORE MVB sequence activating Finance app · RTO: 45min target
Operational
Compromised
Xshield quarantine
Recovering (Rubrik)
Veeam restore
Security event feed 0 events
Phase 1 — Steady state
All systems operational
The enterprise digital estate is running normally. ColorTokens Xshield enforces microsegmentation. MVDE boundary active — 100% of critical systems unaffected.
MVDE intact
100%
Quarantine
Threat level
None
Recovery
1
2
3
4
5
6
7
Steady state Enterprise estate healthy