Command Centre / capability
Defence and Mission Command Environments
Which sources may share a path, and which must not, shapes the design before any product. Separation is enforced in hardware and shown in a witnessed test.
A mission environment is specified by what it must keep doing when part of it stops.
Before displays, before consoles, before any product decision, the design is shaped by which sources may share a path and which must not, and by what an operator has to do, physically, to move between them.
Ask SECCOM to establish the real source and classification map for the room before any equipment is specified, at no cost.
What you get. A source-to-display matrix showing which paths are physically separate, a switching arrangement that enforces the separation in hardware rather than in configuration, and an acceptance test that demonstrates it. A test the accrediting authority can witness.
Failure behaviour is stated. Where a path fails, the design says which positions lose which sources, what the fallback is, and how long restoration takes. It never fails in a direction that joins two paths that were meant to be separate.
Where SECCOM stops. Accreditation of the environment belongs to the accrediting authority. SECCOM designs and evidences to their requirement, and does not imply it holds an accreditation of its own.