Run in order, sized to workload consequence. Each gate produces evidence an auditor, insurer or incident responder can actually evaluate.
(Please use a modern browser to see the interactive version of this visualization)