--- title: "Prove Compliance Through Control by Firevault - Control Blu…" description: "Compliance becomes stronger when control can be demonstrated, not just documented." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/control-blueprints/cp-06#webpage", "url": "https://fire-vault.com/control-blueprints/cp-06", "name": "Prove Compliance Through Control by Firevault - Control Blu…", "description": "Compliance becomes stronger when control can be demonstrated, not just documented.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/ab945ef5-bb63-4eca-aca5-529f4ee484de/og-blueprint-cp-06.webp" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/control-blueprints/cp-06#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/control-blueprints/cp-06#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Control Blueprints", "item": "https://fire-vault.com/control-blueprints" }, { "@type": "ListItem", "position": 3, "name": "Prove Compliance Through Control by Firevault - Control Blu…", "item": "https://fire-vault.com/control-blueprints/cp-06" } ] }, { "@context": "https://schema.org", "@type": "TechArticle", "headline": "Prove Compliance Through Control - Control Blueprint CP-06", "description": "Compliance becomes stronger when control can be demonstrated, not just documented.", "author": { "@type": "Organization", "name": "Firevault" }, "publisher": { "@type": "Organization", "name": "Firevault", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png" } }, "mainEntityOfPage": "https://fire-vault.com/control-blueprints/cp-06", "about": { "@type": "Thing", "name": "Control Blueprint CP-06" } } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) VAULT-led · CP-06 # Prove Compliance Through Control Compliance becomes stronger when control can be demonstrated, not just documented. - CP-06 - Protects the asset Discuss this Blueprint [Read the guide](/learn/guides/proving-compliance-through-control-blueprint) [All Blueprints](/control-blueprints) ![Control Blueprint CP-06, Prove Compliance Through Control: an isometric diagram of an approval chain writing evidence into an archive](/__l5e/assets-v1/f32da93c-dfbf-4b9c-9c64-05d979fc2ecd/blueprint-cp-06-hero.webp) 01 At a glance ## What this Blueprint does. Audit-grade governance of access and evidence What it does Compliance becomes stronger when control can be demonstrated, not just documented. Where it fits Audit-grade governance of access and evidence Who uses it Financial services, Healthcare, Public sector, Critical infrastructure CP-06 topology ## How CP-06 proves compliance through control. A VAULT-led pattern. Every governed action produces signed evidence; every protected dataset is reachable only as a named, recorded event; everything is sealed offline. Grounded in ISO 27001 A.5.34, A.8.15, A.8.16 and NIST CSF GV.OC-3. Z0 Operators and analysts Named individuals Operators and analysts zone Named individuals raising requests and acting on them ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay Reach is named, time-bound and validated against an authorised request. Z1 Controlled data zone Records, evidence Controlled data zone zone Records, evidence and sensitive datasets ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png)Transfer ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Movement out is governed; the boundary is physical, not just policy. Z2 Evidence and audit zone Where signed Evidence and audit zone zone Where signed attestations are gathered for review OSS Crown jewels · detail callout Sealed evidence vault Attestations, audit trails and protected records sealed offline for the retention period. Modules & symbols ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate Integrity check ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock Named access ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay Time-bound path ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png)Transfer Controlled move ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute Approved action ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Physical sever Conduit Enforced module path ┄┄┄ Crown jewels Offline · detail callout 02 Modules in this Blueprint ## How the CP-06 pattern composes. How the primary modules compose 1. [1 ![Validate module icon](/assets/vault-icon-CD3Pv4ri.png) Validate VAULT Checks the request, command or approval before anything proceeds. ](/control/modules/validate) 2. [2 ![Lock module icon](/assets/lock-icon-UU3vOaKE.png) Lock VAULT Holds the asset behind identity, role and policy controls. ](/control/modules/lock) 3. [3 ![Archive module icon](/assets/archive-icon-B3rc85NY.png) Archive VAULT Preserves the records, logs and evidence the control produced. ](/control/modules/archive) Supporting modules - [![Transfer module icon](/assets/transfer-icon-DqGa0PQI.png) Transfer VAULT Governs what moves between protected environments. ](/control/modules/transfer) - [![Relay module icon](/assets/relay-icon-CVhJDRO7.png) Relay FIRE Opens a temporary, time-bound window for an approved purpose. ](/control/modules/relay) - [![Execute module icon](/assets/execute-icon-kJl5Gtmk.png) Execute FIRE Fires the control action the moment a signal demands it. ](/control/modules/execute) - [![Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png) Firebreak FIRE Physically breaks the connection path so the attack cannot continue. ](/control/modules/firebreak) 03 How it reads end to end ## The Blueprint in full. Validate checks the request or command before it proceeds. Lock proves access was restricted. Archive proves records, logs and evidence were preserved. Transfer proves data movement was controlled, Relay proves access was temporary, Execute proves the control fired and Firebreak proves the control was physical, not just policy-based. 04 Sector relevance ## Where CP-06 applies. Financial services Healthcare Public sector Critical infrastructure 05 Related Blueprints ## Compose alongside. [See all](/control-blueprints) [ CP-01 FIRE-led ### Stop Kill-Chain Ransomware Stop ransomware moving, spreading or reaching the crown jewels. View Blueprint ](/control-blueprints/cp-01)[ CP-02 FIRE-led ### Contain Active Breaches When prevention fails, containment must be physical, immediate and provable. View Blueprint ](/control-blueprints/cp-02)[ CP-03 FIRE + VAULT ### Control Third-Party Access Give third parties access without giving them a permanent doorway. View Blueprint ](/control-blueprints/cp-03) ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ![David Bailey](/assets/david-bailey-Dgqj8eaE.jpg) ![Kenny Phipps](/assets/kenny-phipps-CVyooRsR.jpg) Online Now Concierge ## Build control around your environment Talk to our team about composing this Blueprint for your estate. Takes about 2 minutes. No account needed. Find Out Free 2 mins No sign-up