Five planes of model dependency, and what controls each

Most organizations buy controls for one plane and assume coverage across all five. Each plane fails differently and needs a different control.