Layered Defense: Security Standard Maturity Simulator

Security frameworks such as NIST CSF, ISO/IEC 27001, CIS Controls and OWASP describe defense as a set of overlapping functions rather than a single wall. This simulator renders that idea directly: three translucent shells — Protect, Detect, Respond — surround a crown-jewel core, and simulated attack attempts stream inward from every direction. Each shell's coverage slider sets the odds it independently stops an attempt, four maturity-tier presets jump all three sliders to the bands NIST CSF assigns Partial / Risk Informed / Repeatable / Adaptive organizations, and a correlated-failure toggle shows why diverse, independent controls beat piling up correlated ones at the same coverage number. Live readouts track breach probability, maturity tier, and an annualized loss expectancy (ALE) estimate that updates as you tune the model.