Engage
Command Centre / capability
Defence and Mission Command Environments
Which sources may share a path, and which must not, shapes the design before any product. Separation is enforced in hardware and shown in a witnessed test.
A mission environment is specified by what it must keep doing when part of it stops.
Before displays, before consoles, before any product decision, the design is shaped by which sources may share a path and which must not, and by what an operator has to do, physically, to move between them.
Failure behaviour is stated. Where a path fails, the design says which positions lose which sources, what the fallback is, and how long restoration takes. No failure ever joins two paths that were meant to be separate.
Where SECCOM stops. Accreditation of the environment belongs to the accrediting authority. SECCOM designs to their requirement and produces the evidence they ask for. It does not imply it holds an accreditation of its own.
Next step