Worked Examples

The source framework proposes a worked example based on a fictional 5,000-user financial services organisation operating a modern security estate including cloud, identity, PAM, EDR, SIEM, SOAR, NAC, CASB and ZTNA capabilities.

The purpose of worked examples is to demonstrate how ORSM moves from principle to architectural decision.

Example assessment structure

For each domain record:

1. the questions asked;
2. the evidence gathered;
3. the score assigned;
4. material findings;
5. operational risks;
6. recommendations; and
7. the resulting architectural decision.

Example domain scores

Domain Score

---

Protection Intent 4 Complexity Management 3 Operational Sustainability 4 Operational Resilience 5 Recovery Engineering 4 Human Factors 3 Dependency Resilience 4 Total 27 / 35

!!! note "To be developed" The current source material describes the worked-example concept but does not contain enough detail to publish a complete case study without inventing findings. A fuller ORSM 2.1 worked example should therefore be developed separately and clearly identified as new material.