// GLOSSARY

Chain-breaking Control

A set of control proposals showing, in an owned and ordered way, which control breaks which step on the attack path, reduced to a fix-verify work list. It is not a list of individual 'patch suggestions'; it is a structural control decision that breaks the chain of the attack path and forms the execution leg of the Modular Red Team Simulation report. The concept's logic is economical and offers a strong lever to the defense. An attack path is by nature many steps: it consists of links such as initial access, credential gathering, privilege escalation, lateral movement and reaching the critical target. The intuitive reaction is to try to close all these links at once, but this is both expensive and often impossible. The chain-breaking control proposes a different logic: a chain breaks not at its weakest but at its most strategic link. A single control placed at the right link renders inert all the following steps bound to that link; if the attacker must pass through that step to reach the critical target, cutting that step closes the whole path. So the matter is not to close every vulnerability one by one but to see the attack path as a whole and find which single intervention breaks the most of the chain at once. The detection-gap matrix shows which steps are invisible, and the chain-breaking control which step must be closed.