Go to the primary references
- Black AtlasThe main capability site, service definitions, and contact route.
- Black Atlas limits and non-claimsRead this alongside any capability description.
- Black Atlas evidence and provenanceIts public account of source handling and claim status.
- James Scott’s relationship to KRYOS V6Primary project account of the architect and framework.
- James Scott’s official profileHis wider biography and work, presented in first-party materials.
- NIST Cybersecurity FrameworkOfficial resources for understanding and managing cybersecurity risk.
- MITRE ATT&CK resourcesOfficial introductions to its knowledge base and terminology.
Plain-language glossary
12 terms
Attack path
A proposed or evidenced chain of conditions linking an initial opportunity to an important asset. Each connection needs its own support.
Assurance
A reasoned basis for confidence in a defined claim. Its strength depends on evidence, scope, and review.
Control
A measure intended to change risk, such as an access rule, approval requirement, or monitoring process.
Contradiction
A material disagreement between claims or sources that requires explanation, qualification, or another check.
Crown jewel
An asset or capability whose loss would cause significant harm to the organization’s mission or operations.
Effective permission
What an identity can actually do after relevant roles, policies, conditions, and restrictions are considered.
Evidence provenance
The history of information, including where it came from and how it reached the current analysis.
Inference
A conclusion drawn from evidence and assumptions. It should remain distinguishable from a direct observation.
Human review
An accountable person’s examination of evidence, scope, options, and authority before a consequential next step.
Residual risk
The risk that remains after the controls or other responses considered in the assessment.
Simulation
An exploration of a model under stated assumptions. Its output is not automatically an observed real-world result.
Threat intelligence
Evidence and analysis interpreted for a security decision, with relevance, uncertainty, and source context made explicit.
Prepare a better inquiry
Use the inquiry checklist to name your decision, scope, evidence, and unresolved questions. It is a blank planning aid, not an assessment or application.
Plain text · Version 1.0 · 18 October 2026. Essential instructions are also available on the contact page.