The Framework · Overview

How DEFEND
is actually built

DEFEND is a decision-support framework, not a product. This is the engineering underneath it — the outcomes it works toward, the model that holds it together, and the principles that constrain every part of it.

What DEFEND is

A decision-support framework, not a product

DEFEND connects durable ways of thinking with defined protection outcomes, checkable safeguards, and proportionate ways to verify them. It's technology-neutral and vendor-neutral — it doesn't sell you anything, and it doesn't pick a winner among providers.

DEFEND supports your judgment. It does not make decisions on your behalf, and it is not an enterprise compliance framework repackaged for individuals.

The decision path

Five steps, every time

1

Consider

Understand the concern, context, desired outcomes, dependencies, alternatives, and consequences.

2

Choose

Exercise informed, proportionate judgment — DEFEND supports the decision, it never makes it for you.

3

Implement

Translate the decision into practices, configurations, or other protective actions.

4

Verify

Confirm the safeguard is actually in place, using proportionate evidence.

5

Sustain

Maintain, recover, adapt, migrate, replace, or retire the arrangement as circumstances change.

What it works toward

Four outcomes, none of them ranked above another

A single safeguard often serves more than one outcome — but none of the four replaces another.

OutcomeMeaningBoundary
PrivacyMeaningful agency over observation, collection, linkage, inference, use, retention, and disclosure of information about you.Broader than secrecy or confidentiality; does not require absolute control.
SecurityProtection against unauthorized or unintended access, use, disclosure, alteration, impersonation, destruction, loss, fraud, and disruption.Reduces risk but does not eliminate it.
Digital ResilienceThe capacity to prepare for, withstand, respond to, recover from, and adapt to compromise, failure, loss, error, disruption, or technological change.Includes continuity, recovery, adaptation, migration, and exit.
Digital SovereigntyInformed agency and practical control over the identities, information, assets, and services that matter to you — including the ability to understand, choose, protect, recover, move, replace, or discontinue them.Does not require complete ownership, self-hosting, anonymity, or independence.

How the pieces fit together

Domain, Capability, Control

Underneath every part of DEFEND sit three connected ideas:

Where

Digital Life Domain

Which part of your digital life is involved — email, devices, money, and so on.

What outcome

Capability

The protection outcome that should exist or be maintained there.

What you do

Control

The specific, checkable safeguard that actually realizes it.

A Control applies directly within every Domain it's relevant to — a Domain doesn't "own" the Controls inside it, and every Domain is architecturally equal, no matter how common it is.

At a glance

The framework today

16 Digital Life Domains
34 Capabilities
279 Controls
77 Guidance Modules

These are working-draft figures, not a maturity score or certification claim — see the Roadmap for what's built and what's still ahead.

Foundational principles

Five principles constrain everything

Any part of DEFEND that violates one of these is invalid — no exceptions.

PrincipleCommitment
Individual FirstDEFEND prioritizes your legitimate interests, agency, protection, accessibility, and long-term needs as the primary subject and beneficiary.
Informed & Proportionate ChoiceChoices are grounded in your context, objectives, risks, capabilities, resources, dependencies, alternatives, and consequences.
Integrated Lifecycle ProtectionYour digital life is treated as an interconnected system, protected across its full lifecycle — not just at setup.
Recoverability & Preserved ChoiceYou keep proportionate options to continue, recover, restore, move, replace, transfer, or discontinue important arrangements.
Assurance IntegrityDEFEND represents status, evidence, effectiveness, and limitations accurately — never claiming more assurance than the evidence supports.

Reading the language

DEFEND uses precise words on purpose, so you always know how firm a statement is:

TermMeaning
shallAn absolute requirement.
shall notAn absolute prohibition.
shouldA strong recommendation; departing from it needs good reason.
mayA permitted option, with no recommendation either way.