{ "schemaVersion": "deck-intelligence.v1", "id": "019dd923-5ca1-7489-b633-19061fbe2812", "slug": "abffd4c7eaab37e8", "title": "How aligning security and the business creates cyber resilience", "subtitle": "Accenture", "author": "Accenture", "pageCount": 33, "kind": "consulting-deck", "orientation": "landscape", "aspectRatio": 1.773, "document": { "id": "019dd923-5ca1-7489-b633-19061fbe2812", "slug": "abffd4c7eaab37e8", "title": "How aligning security and the business creates cyber resilience", "rawTitle": "How aligning security and the business creates cyber resilience", "authorId": "Accenture", "authorName": "Accenture", "authorDisplay": "Accenture", "kind": { "slug": "consulting-deck", "label": "Consulting deck" }, "sourceType": { "slug": "strategy_consulting", "label": "Strategy consulting" }, "fileName": "How-aligning-security-and-the-business-creates-cyber-resilience.pdf", "sourceUrl": "https://www.accenture.com/content/dam/accenture/final/a-com-migration/pdf/pdf-165/accenture-state-of-cybersecurity-2021.pdf", "sourceDate": "2021-06-30 00:00:00", "presentationDate": null, "ingestedAt": "2026-04-23 20:51:25+00", "status": "ready", "pageCount": 33, "orientation": "landscape", "aspectRatio": 1.773, "targetCompany": null, "targetTicker": null, "metadata": { "local_root": "/tmp/legacy-images/abffd4c7eaab37e8", "origin_corpus": "consulting" } }, "coverage": { "pageCount": 33, "pagesIndexed": 33, "pagesWithImages": 33, "pagesWithMetadata": 33, "imageCoveragePct": 100, "metadataCoveragePct": 100, "componentCount": 234, "chartCount": 13, "metricSlides": 22, "toolMatches": 97, "documentToolMatches": 0, "frameworkMatches": 9, "arcMatches": 1, "beatMatches": 5, "loopMatches": 5, "patternMatches": 0, "storymakersMatch": true, "scoreAvailable": true, "reviewAvailable": true, "activistThesisAvailable": false, "pitchdeckMetadataAvailable": false, "pitchdeckProfileAvailable": false }, "blocks": [], "matches": { "arcs": [ { "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "evidence": "Classic context (p4-10) -> problem of alignment (p11-14) -> segment-by-segment evidence (p15-21) -> 3-pillar recommendation (p22-26) -> takeaways (p27-28).", "isPrimary": true, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:28.977035+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "beats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 }, { "to": 14, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 11, "name": "Problem & Complication", "beatId": "019dd95a-0680-7418-820b-e8cd5d8a7ecc", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Problem & Complication", "slug": "consultants-gambit-problem-complication", "status": "active", "canonId": "019dd9b8-064a-777f-a374-e9a8c43dedd4", "version": 1, "description": null }, "evidence": "'Why alignment matters' divider + Business Blockers lag Champions on key measures.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 88 }, { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 }, { "to": 26, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 22, "name": "Solution & Approach", "beatId": "019dd95a-0680-7418-820b-f0b30fd9e7ba", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Evidence & Proof", "slug": "consultants-gambit-evidence-proof", "status": "active", "canonId": "019dd9b8-07b1-7688-8e1e-7637fec3802a", "version": 1, "description": null }, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "isPrimaryArc": true, "parentBeatType": { "name": "Evidence", "slug": "evidence", "status": "active", "canonId": "019dd9b8-03f9-772a-b84a-4f07b415b77a", "version": 1, "description": "A dedicated proof beat exists in only ~4 arcs (Gambit, Sequoia, AIDA, Monroes). Other arcs embed evidence inline within development." }, "alignedBlockIds": null, "matchConfidence": 88 }, { "to": 28, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null, "categoryName": "Strategy & Business", "categorySlug": "strategy-business" }, "from": 27, "name": "Impact & Next Steps", "beatId": "019dd95a-0680-7418-820b-f63c4f49c4bf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Impact & Next Steps", "slug": "consultants-gambit-impact-next-steps", "status": "active", "canonId": "019dd9b8-0849-7728-9ee9-fd1609c4c655", "version": 1, "description": null }, "evidence": "'Path to cyber resilience' divider and synthesis on aligning security with business strategy.", "position": 5, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 6, "from": 5, "loop": { "name": "30_2x2_matrix", "slug": "30-2x2-matrix", "status": "active", "bestFor": "Portfolio analysis, prioritization, strategic positioning", "canonId": "019dd956-7225-756a-9cc7-1e6d3f039818", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "Dimension 1 (X-axis) -> Dimension 2 (Y-axis) -> The Four Quadrants -> The Sweet Spot", "description": "Plot options on two critical dimensions to reveal the optimal quadrant", "familyLabel": null, "categoryName": "Consulting Framework", "categorySlug": "consulting-framework" }, "matchId": "019dd95a-07fd-712f-b775-13bc7fb2165e", "evidence": "Page 6 reveals 2x2 with axes 'Cybersecurity Resilience' vs 'Business Strategy Alignment' and 4 named quadrants.", "position": 1, "objective": "Introduce the Cyber Quadrant framework that defines the 4 archetypes", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } }, { "to": 10, "from": 8, "loop": { "name": "03_aha_moment", "slug": "03-aha-moment", "status": "active", "bestFor": "Data-heavy sections, research findings, analytical arguments", "canonId": "019dd956-66f4-7668-ab25-cec9c996c0bc", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Problem/Question -> What the Data Shows -> The Insight", "description": "Establish a tension, present data, then deliver the insight that changes everything", "familyLabel": null, "categoryName": "Narrative", "categorySlug": "narrative" }, "matchId": "019dd95a-07fd-712f-b775-14444217b104", "evidence": "Three sequential data findings (270 attacks, 82% budgets up, 32% cloud gap) building to the alignment thesis.", "position": 2, "objective": "Show the data on where the cybersecurity world is now", "confidence": 78, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } }, { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null, "categoryName": "Consulting Framework", "categorySlug": "consulting-framework" }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } }, { "to": 25, "from": 22, "loop": { "name": "09_precedent", "slug": "09-precedent", "status": "active", "bestFor": "Risk mitigation, strategy validation, building confidence in new approaches", "canonId": "019dd956-695f-7615-8f82-39d919918314", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Precedent Case -> What Happened -> The Parallel -> Applied Learning", "description": "Use historical or external examples to validate your approach", "familyLabel": null, "categoryName": "Validation", "categorySlug": "validation" }, "matchId": "019dd95a-07fd-712f-b775-1fd822f2171a", "evidence": "Three pillars on p22 each backed on p23-25 by a stat showing what Champions do differently.", "position": 4, "objective": "Tell readers to replicate what Cyber Champions already do", "confidence": 82, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } }, { "to": 26, "from": 26, "loop": { "name": "04_tale_two_worlds", "slug": "04-tale-two-worlds", "status": "active", "bestFor": "Competitive analysis, benchmarking, case for change", "canonId": "019dd956-674f-750b-b15d-f082e2717f4e", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "Current State -> Desired State / Benchmark -> The Gap & Implication", "description": "Show the gap between two states to drive urgency or highlight opportunity", "familyLabel": null, "categoryName": "Comparison", "categorySlug": "comparison" }, "matchId": "019dd95a-07fd-712f-b775-20623d50da77", "evidence": "Headline 'Are security and non-security executives on the same page?' with 43% vs 31% comparison.", "position": 5, "objective": "Contrast security vs non-security executive views as proof of misalignment", "confidence": 65, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "tools": [ { "tool": { "name": "Pyramid Principle", "slug": "pyramid-principle", "status": "active", "bestFor": "When the document has a single governing decision or recommendation the reader is asked to accept, and the case can be decomposed into a small number of clean groups. Strategy decks, board memos, investment committee papers.", "canonId": "019dd956-7cbd-7219-a477-c871e2bc1aff", "version": 1, "bodyDocId": "88b6ac56-b880-46f9-8621-ef3491ab6235", "description": "Lead with the answer; group three to five MECE supports beneath it; recurse one level down. Top-down hierarchical structure for any document with a single recommendation.", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "block", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-33702d03387c", "evidence": "Top-down: stat then framework on p6 supports the chapter thesis.", "pageRefs": null, "priority": "Core", "whenToUse": "When the document has a single governing decision or recommendation the reader is asked to accept, and the case can be decomposed into a small number of clean groups. Strategy decks, board memos, investment committee papers.", "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": "Solves the two failure modes of expert communication at once: (1) the long climb where readers wait pages for the answer, and (2) logical mush from non-MECE groupings. Progressive disclosure lets a reader stop at any depth and get the right information.", "antipattern": "Chronological structure (\"what we did, what we found, what we conclude\") instead of logical hierarchy. Top-of-pyramid that is a topic (\"strategic options\") instead of an answer (\"pursue Option B because...\"). Non-MECE supports that overlap or fail to cover the universe.", "cardinality": null, "narrativePurpose": "Transfer conviction with minimum reader effort by mirroring how decision-makers consume information: answer first, scaffolding behind." }, { "tool": { "name": "Three Pillars", "slug": "three-pillars", "status": "active", "bestFor": null, "canonId": "019dd956-81ef-7455-a365-b234d95a6bbb", "version": 1, "bodyDocId": null, "description": "Three major supporting arguments that are MECE and address key concerns", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "block", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-990f5ed0cde1", "evidence": "Three named segments (Blockers, Risk Takers, Champions) anchor the next 9 pages.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 55, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "The Rule of Three", "slug": "the-rule-of-three", "status": "active", "bestFor": null, "canonId": "019dd956-8962-75cf-b4f8-9394501a6f33", "version": 1, "bodyDocId": null, "description": "Ideas presented in threes are more memorable and satisfying", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "block", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-22d886c3663e", "evidence": "Exactly 3 pillars (CISO seat, threat-centric, secure cloud) anchor next 3 slides.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Three Pillars", "slug": "three-pillars", "status": "active", "bestFor": null, "canonId": "019dd956-81ef-7455-a365-b234d95a6bbb", "version": 1, "bodyDocId": null, "description": "Three major supporting arguments that are MECE and address key concerns", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "block", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-2635447d94df", "evidence": "Block opens with three icon-labeled pillars elaborated p23-25.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 90, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Contrast Pairs", "slug": "contrast-pairs", "status": "active", "bestFor": null, "canonId": "019dd956-9b77-70d3-88b1-f34e26f60860", "version": 1, "bodyDocId": null, "description": "Creating tension through opposites: Before↔After, Problem↔Solution, Pain↔Relief", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Storyteller", "layer": "loop", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-4c0e0e3055ba", "evidence": "Quadrant sets up Champions vs Vulnerable contrast that runs through the deck.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Inductive Reasoning", "slug": "inductive-reasoning", "status": "active", "bestFor": null, "canonId": "019dd956-99c6-705e-94cc-76a504c3da37", "version": 1, "bodyDocId": null, "description": "Grouping similar evidence to form a conclusion (Evidence → Pattern → Conclusion)", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Architect", "layer": "loop", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-65390e21cab1", "evidence": "First of three data points (attacks, budgets, cloud) building toward alignment thesis.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 72, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Parallel Structure", "slug": "parallel-structure", "status": "active", "bestFor": null, "canonId": "019dd956-9f34-762a-93b7-1d8e84bbd153", "version": 1, "bodyDocId": null, "description": "Using similar grammatical structure for related ideas", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Architect", "layer": "loop", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-9772f36e5656", "evidence": "Sets up parallel intro+perf+value blocks for each segment that follow on p13-21.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Parallel Structure", "slug": "parallel-structure", "status": "active", "bestFor": null, "canonId": "019dd956-9f34-762a-93b7-1d8e84bbd153", "version": 1, "bodyDocId": null, "description": "Using similar grammatical structure for related ideas", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Architect", "layer": "loop", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-d3cdfa4cb792", "evidence": "Reuses Blockers template (definition -> perf -> value).", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Callback", "slug": "callback", "status": "active", "bestFor": null, "canonId": "019dd956-a3a9-708f-b4a3-d3da2181c576", "version": 1, "bodyDocId": null, "description": "Referencing earlier content for payoff and cohesion", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Storyteller", "layer": "loop", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-5fda20d83c08", "evidence": "Recaps attacks, budgets, cloud - the three p8-10 themes.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Slide recipe: Cover", "slug": "cover-slide", "status": "active", "bestFor": null, "canonId": "019df269-2a08-767d-9128-e7431e6fe8a3", "version": 1, "bodyDocId": "019df269-29e5-7738-b5fa-6892e5dc8e65", "description": "The first ten seconds. Build it deliberately.", "familyLabel": "slide-recipe", "categoryName": "Slide", "categorySlug": "slide" }, "agent": "designer", "layer": "slide", "agents": [ "designer" ], "matchId": "1aaa195a-120f-4bbc-bed7-bcab900646ad", "evidence": "How aligning security and the business creates cyber resilience", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:04.134072+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 1, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Authority Bias", "slug": "authority-bias", "status": "active", "bestFor": null, "canonId": "019dd956-c38d-70b9-a284-b2b479763356", "version": 1, "bodyDocId": null, "description": "Expert opinions are weighted more heavily - cite credible sources", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Architect", "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-21c576540bc1", "evidence": "Named senior authors lend the report expert weight.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 65, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 3, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Credibility Transfer", "slug": "credibility-transfer", "status": "active", "bestFor": null, "canonId": "019dd956-bd34-759a-8e3b-2f14b571a2a1", "version": 1, "bodyDocId": null, "description": "Borrowing authority from trusted sources or vivid details", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-1f5738d048dc", "evidence": "Author bios establish Accenture security-practice authority.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 3, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Section divider", "slug": "section-divider", "status": "active", "bestFor": null, "canonId": "019dd9e1-4c66-707d-8d1f-6e14547134c7", "version": 1, "bodyDocId": null, "description": "A transitional slide marking the start of a new section.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "2583d2cf-da3b-4b0a-b238-b1ae7e8d66fa", "evidence": "Championing cybersecurity", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.8, "extraction": { "at": "2026-07-16 20:59:04.28072+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 4, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-26c9f4baa426", "evidence": "'Championing cybersecurity' frames the chapter's argument.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-2c93f906e172", "evidence": "Specific 78% stat anchors the abstract risk.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Opening Hooks", "slug": "opening-hooks", "status": "active", "bestFor": null, "canonId": "019dd956-aeb0-77d5-bfbd-9cd9a6be8186", "version": 1, "bodyDocId": null, "description": "Techniques to capture attention: Startling statistic, provocative question, short story, analogy, contrast", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-287046460724", "evidence": "Callout opens with startling 78% who don't know how a breach will affect them.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "2x2 matrix", "slug": "matrix-2x2", "status": "active", "bestFor": null, "canonId": "019dd9e1-50ab-72d1-8afb-3ab0a38e32a8", "version": 1, "bodyDocId": null, "description": "BCG matrix, importance/urgency, any axes-and-quadrants frame.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3f721837-4b0a-4970-af76-704e3237e3ee", "evidence": "The cyber quadrant", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 20:59:04.39164+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-37d20a3868fc", "evidence": "Title states the so-what: 'what a difference a year makes... leading orgs demonstrating cyber resilience.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-380a2b48f612", "evidence": "2x2 quadrant chart matches the categorical comparison.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-3d7e346f9438", "evidence": "Cyber Champions quadrant filled in deep purple to mark the target.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Nudge", "slug": "nudge", "status": "active", "bestFor": null, "canonId": "019dd956-c61a-72f9-920c-88acf4ecc336", "version": 1, "bodyDocId": null, "description": "Subtle hints can significantly affect decisions - strategic CTA placement", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Architect", "Designer" ], "matchId": "019dd95a-0d40-7758-be36-4b40c39ecd61", "evidence": "Visual nudge toward the top-right Champions quadrant.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 62, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Visual Hierarchy", "slug": "visual-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-b2ca-706b-937f-e52441086fd7", "version": 1, "bodyDocId": null, "description": "Order of perception through Size > Color > Position > Weight > Space", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-40145cccee65", "evidence": "Quadrant labels typeset large; descriptions secondary.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Von Restorff Effect", "slug": "von-restorff-effect", "status": "active", "bestFor": null, "canonId": "019dd956-beab-73d8-9f62-30d0332e926e", "version": 1, "bodyDocId": null, "description": "Items that stand out are noticed and remembered - make key points visually distinct", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-44feb29f8179", "evidence": "Champions cell visually distinct from the other three to mark the goal.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-514e250ca541", "evidence": "'Cyber attacks are up' is the so-what, not the topic.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Annotation", "slug": "annotation", "status": "active", "bestFor": null, "canonId": "019dd956-b5b9-7668-bf0e-3af99823ec5c", "version": 1, "bodyDocId": null, "description": "Adding explanatory labels to highlight key data points", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-5b01dfc65f30", "evidence": "Large purple '31%' arrow annotates the year-over-year delta.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-5441cbad28f9", "evidence": "Stacked bars compare 2020 vs 2021 attempted/successful counts.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-61f63d29649e", "evidence": "Two-tone purple distinguishes attempted vs successful.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-5e9bc3827272", "evidence": "Specific 270 attacks per company makes the rise tangible.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-6954ea86051b", "evidence": "'Security investment continues to rise' is the insight.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 9, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-7145f53b7e4f", "evidence": "Figure 3 referenced for budget trend.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 9, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-6cdbef63e1b8", "evidence": "82% of respondents reporting budget increases.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 9, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-774d1210ced2", "evidence": "'Cloud still has a complex relationship with security' states the tension.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-78153e3d94e2", "evidence": "Specific 32% callout.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Contrast Principle", "slug": "contrast-principle", "status": "active", "bestFor": null, "canonId": "019dd956-bf0f-73ae-b9df-e60508cdaa65", "version": 1, "bodyDocId": null, "description": "Higher visual weight draws attention - use contrast strategically for emphasis", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-7c584c1ac5f7", "evidence": "Cloud benefits vs security afterthought framed as tension.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 65, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "ab7d99b8-cfcb-494f-aac8-f36fe2ab5fff", "evidence": "Waterfall chart showing reduction from $611,000 to $317,000", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:06.377206+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-81f60e77dbc7", "evidence": "Subhead spells out the 4 measures: stop, find, fix, reduce impact.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-84a0ab18de3b", "evidence": "Comparison table aligns 4 segments x 4 KPIs.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-889426635a07", "evidence": "Purple-to-pink gradient ranks Champions first.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Small Multiples", "slug": "small-multiples", "status": "active", "bestFor": null, "canonId": "019dd956-b32d-7586-b368-baa1dd388ed4", "version": 1, "bodyDocId": null, "description": "Repeating similar charts for comparison across categories or time", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-8c14b3eaf71a", "evidence": "Same metric repeated across 4 segment columns.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Visual Hierarchy", "slug": "visual-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-b2ca-706b-937f-e52441086fd7", "version": 1, "bodyDocId": null, "description": "Order of perception through Size > Color > Position > Weight > Space", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-90549f97cc24", "evidence": "Champions column placed first and highlighted.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-9cca18869c80", "evidence": "'Business Blockers' label + definition acts as section title.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 13, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-a293b860e39e", "evidence": "Segment-coded purple consistent with quadrant on p6.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 13, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-a4e9e9267506", "evidence": "Callout: 'Blockers outperform Risk Takers and Vulnerable, but lag Champions.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-a86f97d6ed84", "evidence": "Two side-by-side bar charts compare 4 segments on breach % and damage %.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-b23ca33e3aee", "evidence": "Four shades of purple/pink distinguish each segment.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Pre-attentive Attributes", "slug": "pre-attentive-attributes", "status": "active", "bestFor": null, "canonId": "019dd956-b61d-717f-a402-24ccbb4b60d8", "version": 1, "bodyDocId": null, "description": "Visual properties processed instantly: color, size, orientation, shape", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-af076557bc57", "evidence": "Business Blockers bar boxed in dotted outline to mark focus.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Small Multiples", "slug": "small-multiples", "status": "active", "bestFor": null, "canonId": "019dd956-b32d-7586-b368-baa1dd388ed4", "version": 1, "bodyDocId": null, "description": "Repeating similar charts for comparison across categories or time", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-b4c65b1e0787", "evidence": "Same bar layout repeated for two metrics side by side.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-bb3df38c04e5", "evidence": "Body lead: 'Blockers could reduce costs by 48% per attack' = the insight.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Annotation", "slug": "annotation", "status": "active", "bestFor": null, "canonId": "019dd956-b5b9-7668-bf0e-3af99823ec5c", "version": 1, "bodyDocId": null, "description": "Adding explanatory labels to highlight key data points", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-c2a5e3ac2c84", "evidence": "Big '48%' arrow with 'reduction in cost per successful attack.'", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-bf6de4e04ce0", "evidence": "Waterfall/value bridge: $611K -> $317K with two reduction components.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-c84f3f76a503", "evidence": "Solid purple bar for current vs dotted purple for to-be.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-c73234fcfcde", "evidence": "Specific dollars: $611K, $317K, $294K savings.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "2652a5e4-a0e9-4b7b-96a2-b6061e7ef0ce", "evidence": "Figure 9. Value at stake if Cyber Risk Takers perform like Cyber Champions", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:06.446091+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-cd590ea5fef9", "evidence": "'Cyber Risk Takers' label + definition mirrors p13.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-d4d8f544e8ad", "evidence": "Callout: 'Securing more budget doesn't translate to better cyber resilience.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-dbeef1c3e1ea", "evidence": "Comparison bars for Risk Takers across the 4-segment cohort.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-df9d4912b97e", "evidence": "Same segment color coding.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Storytelling: audience calibration", "slug": "audience", "status": "active", "bestFor": null, "canonId": "019df269-23ea-723a-87c0-af1d78d702d2", "version": 1, "bodyDocId": "019df269-23c5-72ec-8b94-78fc1da7b656", "description": "The same thesis, written for four different audiences, produces four", "familyLabel": "narrative-block", "categoryName": "Narrative & Transformation", "categorySlug": "narrative-transformation" }, "agent": "storyteller", "layer": "slide", "agents": [ "storyteller" ], "matchId": "74a14107-1ef1-48ea-9af9-d286765e9fa1", "evidence": "Our survey shows that 87% of banks are prioritizing investment in embedded payments solutions, while 65% are focusing on value-added services.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:28.319002+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-e3b9c8042d26", "evidence": "Body: 'Risk Takers could reduce costs by 65% per attack.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Annotation", "slug": "annotation", "status": "active", "bestFor": null, "canonId": "019dd956-b5b9-7668-bf0e-3af99823ec5c", "version": 1, "bodyDocId": null, "description": "Adding explanatory labels to highlight key data points", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-edae172bb88e", "evidence": "65% reduction call-out matches p15 pattern.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-e7ef97553b41", "evidence": "Same bridge format as p15 for Risk Takers segment.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-e98d2e0ccd98", "evidence": "$226K savings per attack named explicitly.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3726e275-03f2-4fbd-ab78-790850dbc751", "evidence": "chart/waterfall: Figure 9. Value at stake if Cyber Risk Takers perform like Cyber Champions", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-17 03:52:28.403244+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-f1d3133f63f3", "evidence": "'Cyber Champions' divider with 'cream of the crop' positioning.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-f7308f44601b", "evidence": "Champion segment color carried through.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-fb99a6ff08cd", "evidence": "Callout: Champions experience 8 pp fewer breaches than Blockers, 36 pp fewer than Risk Takers.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-fcf8eff08a00", "evidence": "Bar comparison of breach incidence across segments.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-00448b20caef", "evidence": "Champions bar emphasized.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 65, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-0589dc911842", "evidence": "Callout names top countries and industries within Champions.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-0848fe79b3af", "evidence": "Segmentation visual showing Champions composition.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-0dcd60c69d7b", "evidence": "Title 'How to be a Cyber Champion' states the so-what for the recommendation block.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Metaphor & Analogy", "slug": "metaphor-analogy", "status": "active", "bestFor": null, "canonId": "019dd956-adea-7729-bca1-70810d6238a9", "version": 1, "bodyDocId": null, "description": "Making abstract concepts concrete through familiar comparisons", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-1f74e9d48132", "evidence": "Aerial crossroads image as visual metaphor for the strategic choice.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 72, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Picture Superiority Effect", "slug": "picture-superiority-effect", "status": "active", "bestFor": null, "canonId": "019dd956-c201-7014-bb58-3e85e3e11dfd", "version": 1, "bodyDocId": null, "description": "Pictures remembered 6x better than words - prioritize visuals over text", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-18424029ba22", "evidence": "Crossroads photo on right anchors the 'choose your path' metaphor.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Typography Hierarchy", "slug": "typography-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-ba98-77ab-9513-ff2344da8bc7", "version": 1, "bodyDocId": null, "description": "Using font size, weight, and style to create reading order", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-14da374de7aa", "evidence": "Massive white headline dominates; pillar labels secondary.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Visual Hierarchy", "slug": "visual-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-b2ca-706b-937f-e52441086fd7", "version": 1, "bodyDocId": null, "description": "Order of perception through Size > Color > Position > Weight > Space", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-10890bddc098", "evidence": "Three icons + labels arranged equal-weight under giant headline.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-2a602cf6c7d3", "evidence": "Title 'Give CISOs a seat at the top table' is a directive insight.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 23, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-2da04d53951d", "evidence": "Only 19% of Champions have budget authorized by CEO/board.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 23, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-32ebdf8f4ec1", "evidence": "Title 'Be threat-centric and business aligned' is directive.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-341dae551a9f", "evidence": "87% of Champions measure maturity at least annually, 18 pp more than Blockers.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-3a6cd4334c49", "evidence": "Title 'Get the most out of secure cloud' is the directive.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 25, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-3c5df41bb5e9", "evidence": "83% of Champions vs 70% overall make security a major cloud consideration.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 25, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-41afb43e88b6", "evidence": "Question headline 'Are security and non-security executives on the same page?' frames the gap.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Audience Definition", "slug": "audience-definition", "status": "active", "bestFor": null, "canonId": "019dd956-7f2a-775d-aeee-ff099bcb7756", "version": 1, "bodyDocId": null, "description": "Six key questions: Who are they? What do they know? What do they believe? What do they care about? What do they fear? What decisions can they make?", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "2812129f-209a-4ec4-9e8a-ff7408cea4d9", "evidence": "security executives (N=4,244) and non-security executives (N=500)", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:27.269561+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Comparison frame", "slug": "comparison-frame", "status": "active", "bestFor": null, "canonId": "019dd9e1-484b-7399-a4fc-d14644b99f93", "version": 1, "bodyDocId": null, "description": "Two or more states/subjects placed side by side to expose a gap.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3eb6a6b4-1a4d-45e2-98a9-b8fd81be7fd5", "evidence": "comparison_table with 'Security executives' and 'Non-security executives' columns", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:27.225777+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-4638d8f467e1", "evidence": "43% non-security vs 31% security executives on the late-cloud-security gap.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Contrast Principle", "slug": "contrast-principle", "status": "active", "bestFor": null, "canonId": "019dd956-bf0f-73ae-b9df-e60508cdaa65", "version": 1, "bodyDocId": null, "description": "Higher visual weight draws attention - use contrast strategically for emphasis", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-49cfe203029f", "evidence": "Contrast between two exec cohorts is the whole point of the slide.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-4c8b11a2d4c3", "evidence": "Headline restates the thesis: cybersecurity and business strategies must align.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Authority Bias", "slug": "authority-bias", "status": "active", "bestFor": null, "canonId": "019dd956-c38d-70b9-a284-b2b479763356", "version": 1, "bodyDocId": null, "description": "Expert opinions are weighted more heavily - cite credible sources", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Architect", "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-5a88b97e56ff", "evidence": "External practitioner quote backs the recommendation.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Call to action", "slug": "call-to-action", "status": "active", "bestFor": null, "canonId": "019dd9e1-4bbb-702a-9ead-82daf188bb7c", "version": 1, "bodyDocId": null, "description": "Explicit prescription of what the audience should do next.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "94c7120d-0580-4229-b2bc-d677c512614f", "evidence": "By aligning their cybersecurity efforts with the business strategy, organizations can not only achieve better business outcomes, but also seize an advantage in the race to cyber resilience.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.5, "extraction": { "at": "2026-07-17 03:52:27.439726+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Closing Techniques", "slug": "closing-techniques", "status": "active", "bestFor": null, "canonId": "019dd956-af13-774b-a4fd-7db0a3a88d51", "version": 1, "bodyDocId": null, "description": "Strong endings: Callback, challenge, vision, clear CTA, memorable line", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-53f50badb443", "evidence": "Closes with vision: 'seize an advantage in the race to cyber resilience.'", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Credibility Transfer", "slug": "credibility-transfer", "status": "active", "bestFor": null, "canonId": "019dd956-bd34-759a-8e3b-2f14b571a2a1", "version": 1, "bodyDocId": null, "description": "Borrowing authority from trusted sources or vivid details", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-55cb1950ceb3", "evidence": "Pull-quote attributed to a CISO in the insurance industry.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Storytelling: audience calibration", "slug": "audience", "status": "active", "bestFor": null, "canonId": "019df269-23ea-723a-87c0-af1d78d702d2", "version": 1, "bodyDocId": "019df269-23c5-72ec-8b94-78fc1da7b656", "description": "The same thesis, written for four different audiences, produces four", "familyLabel": "narrative-block", "categoryName": "Narrative & Transformation", "categorySlug": "narrative-transformation" }, "agent": "storyteller", "layer": "slide", "agents": [ "storyteller" ], "matchId": "7aefcce0-8080-4441-88d9-ca8b63c1d4bc", "evidence": "CISO, Insurance industry", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:27.396231+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Audience Definition", "slug": "audience-definition", "status": "active", "bestFor": null, "canonId": "019dd956-7f2a-775d-aeee-ff099bcb7756", "version": 1, "bodyDocId": null, "description": "Six key questions: Who are they? What do they know? What do they believe? What do they care about? What do they fear? What decisions can they make?", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "61cd1ebb-31da-4e91-9876-98a417c13e1a", "evidence": "The State of Cybersecurity Resilience 2021 research surveyed 4,744 executives in March and April of 2021 to understand the extent to which organizations prioritize security, how comprehensive their security plan", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 21:01:48.672088+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 29, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Audience Segmentation", "slug": "audience-segmentation", "status": "active", "bestFor": null, "canonId": "019dd956-8079-7046-8e6b-ecdf1bf15590", "version": 1, "bodyDocId": null, "description": "Grouping audience by attitude toward your message: Champions, Neutrals, Skeptics", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "6ba1fbea-799b-44ad-83e0-4ab9c7a2d674", "evidence": "List of 23 industries with respondent counts\nList of 18 countries with respondent counts", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 21:01:48.704178+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 29, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Analytical method", "slug": "analytical-method", "status": "active", "bestFor": null, "canonId": "b42c4911-7946-49b5-951c-5f3d23f4e2bd", "version": 1, "bodyDocId": null, "description": "Diagnostic / structuring methods (5-whys, fishbone, issue tree, hypothesis-driven).", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "afb84435-9306-4c0b-a1c5-fdd9d8c1f7c5", "evidence": "We then conducted a series of “what if” experiments to explore the return on investment of improving these cybersecurity practices. We created a formula to assess the cost of cyber crime for a company", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.8, "extraction": { "at": "2026-07-16 21:01:48.765285+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 30, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Data Story Arc", "slug": "data-story-arc", "status": "active", "bestFor": null, "canonId": "019dd956-9c30-728e-b974-d3fb123dcf5a", "version": 1, "bodyDocId": null, "description": "Context → Conflict → Insight → Implication structure for data narratives", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "f14c4d35-532b-49b4-8ae2-b4faf3f90949", "evidence": "Figure 16. Modeling formula to assess the cost of cyber crime", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 0.6, "extraction": { "at": "2026-07-16 21:01:48.797056+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 30, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "2x2 matrix", "slug": "matrix-2x2", "status": "active", "bestFor": null, "canonId": "019dd9e1-50ab-72d1-8afb-3ab0a38e32a8", "version": 1, "bodyDocId": null, "description": "BCG matrix, importance/urgency, any axes-and-quadrants frame.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "89bf76d4-752d-4ae3-a853-77476745d372", "evidence": "2x2 matrix showing Business Blockers, Cyber Champions, The Vulnerable, and Cyber Risk Takers with percentages and respondent counts.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:06.512962+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 31, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null } ], "frameworks": [ { "matchId": "019dd95a-1ca5-70bb-bb9c-9cdee52a347a", "evidence": "Axes labelled 'Cybersecurity Resilience' (Y) and 'Business Strategy Alignment' (X).", "framework": null, "confidence": 95, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "frameworkName": "2x2 Matrix" }, { "matchId": "0459ad8a-e131-4af6-9126-0f929c4f4d5b", "evidence": "The slide presents a 2x2 matrix titled 'The cyber quadrant' mapping Cybersecurity Resilience against Business Strategy Alignment.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "frameworkName": "matrix-2x2" }, { "matchId": "6cb6d4c2-e989-4c7b-9a02-efca1ce0a8fd", "evidence": "Categorization of organizations into four distinct groups based on cyber resilience performance.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "frameworkName": "audience-segmentation" }, { "matchId": "e32c5941-0254-4f3e-93fe-77d3cc0361f6", "evidence": "The slide segments the market into four distinct groups: Cyber Champions, Business Blockers, Cyber Risk Takers, and The Vulnerable.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "frameworkName": "audience-segmentation" }, { "matchId": "019dd95a-1ca5-70bb-bb9c-a244113f0c29", "evidence": "$611K -> $317K with two stacked reduction components labelled.", "framework": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "frameworkName": "Waterfall / Value Bridge" }, { "matchId": "019dd95a-1ca5-70bb-bb9c-a579dae84147", "evidence": "Same bridge layout as p15 applied to Cyber Risk Takers segment.", "framework": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "frameworkName": "Waterfall / Value Bridge" }, { "matchId": "019dd95a-1ca5-70bb-bb9c-aad5926282be", "evidence": "Slide hinges on Champions measuring 'maturity of their cybersecurity program' annually.", "framework": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "frameworkName": "Maturity Model" }, { "matchId": "78d62fe8-a7a7-4eec-b780-3033429fa620", "evidence": "The slide presents a mathematical formula for modeling the cost of cyber crime.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 30, "frameworkName": "analytical-method" }, { "matchId": "701c456d-189e-4504-bc36-f42abf283f12", "evidence": "The slide organizes data into a 2x2 grid of four distinct segments.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 31, "frameworkName": "matrix-2x2" } ], "patterns": [] }, "storymakers": { "model": "claude-cli-sonnet-4.6", "backend": null, "rawJson": { "arc": { "id": 1, "slug": "consultants-gambit", "beats": [ { "name": "Situation & Context", "end_page": 10, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "start_page": 4 }, { "name": "Problem & Complication", "end_page": 14, "evidence": "'Why alignment matters' divider + Business Blockers lag Champions on key measures.", "position": 2, "start_page": 11 }, { "name": "Evidence & Proof", "end_page": 21, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "start_page": 15 }, { "name": "Solution & Approach", "end_page": 26, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "start_page": 22 }, { "name": "Impact & Next Steps", "end_page": 28, "evidence": "'Path to cyber resilience' divider and synthesis on aligning security with business strategy.", "position": 5, "start_page": 27 } ], "evidence": "Classic context (p4-10) -> problem of alignment (p11-14) -> segment-by-segment evidence (p15-21) -> 3-pillar recommendation (p22-26) -> takeaways (p27-28).", "confidence": 88 }, "loops": [ { "id": 30, "slug": "30-2x2-matrix", "end_page": 6, "evidence": "Page 6 reveals 2x2 with axes 'Cybersecurity Resilience' vs 'Business Strategy Alignment' and 4 named quadrants.", "position": 1, "objective": "Introduce the Cyber Quadrant framework that defines the 4 archetypes", "confidence": 92, "start_page": 5 }, { "id": 3, "slug": "03-aha-moment", "end_page": 10, "evidence": "Three sequential data findings (270 attacks, 82% budgets up, 32% cloud gap) building to the alignment thesis.", "position": 2, "objective": "Show the data on where the cybersecurity world is now", "confidence": 78, "start_page": 8 }, { "id": 34, "slug": "34-segmentation-split", "end_page": 21, "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "start_page": 12 }, { "id": 9, "slug": "09-precedent", "end_page": 25, "evidence": "Three pillars on p22 each backed on p23-25 by a stat showing what Champions do differently.", "position": 4, "objective": "Tell readers to replicate what Cyber Champions already do", "confidence": 82, "start_page": 22 }, { "id": 4, "slug": "04-tale-two-worlds", "end_page": 26, "evidence": "Headline 'Are security and non-security executives on the same page?' with 43% vs 31% comparison.", "position": 5, "objective": "Contrast security vs non-security executive views as proof of misalignment", "confidence": 65, "start_page": 26 } ], "slide_tools": [ { "tools": [ { "id": 155, "slug": "credibility-transfer", "layer": "Slide", "evidence": "Author bios establish Accenture security-practice authority.", "confidence": 70 }, { "id": 169, "slug": "authority-bias", "layer": "Slide", "evidence": "Named senior authors lend the report expert weight.", "confidence": 65 } ], "page_number": 3 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Championing cybersecurity' frames the chapter's argument.", "confidence": 75 }, { "id": 123, "slug": "opening-hooks", "layer": "Slide", "evidence": "Callout opens with startling 78% who don't know how a breach will affect them.", "confidence": 82 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "Specific 78% stat anchors the abstract risk.", "confidence": 80 }, { "id": 3, "slug": "pyramid-principle", "layer": "Block", "evidence": "Top-down: stat then framework on p6 supports the chapter thesis.", "confidence": 60 } ], "page_number": 5 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Title states the so-what: 'what a difference a year makes... leading orgs demonstrating cyber resilience.'", "confidence": 90 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "2x2 quadrant chart matches the categorical comparison.", "confidence": 88 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Cyber Champions quadrant filled in deep purple to mark the target.", "confidence": 85 }, { "id": 132, "slug": "visual-hierarchy", "layer": "Slide", "evidence": "Quadrant labels typeset large; descriptions secondary.", "confidence": 80 }, { "id": 158, "slug": "von-restorff-effect", "layer": "Slide", "evidence": "Champions cell visually distinct from the other three to mark the goal.", "confidence": 78 }, { "id": 174, "slug": "nudge", "layer": "Slide", "evidence": "Visual nudge toward the top-right Champions quadrant.", "confidence": 62 }, { "id": 78, "slug": "contrast-pairs", "layer": "Loop", "evidence": "Quadrant sets up Champions vs Vulnerable contrast that runs through the deck.", "confidence": 75 } ], "page_number": 6 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Cyber attacks are up' is the so-what, not the topic.", "confidence": 92 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Stacked bars compare 2020 vs 2021 attempted/successful counts.", "confidence": 85 }, { "id": 138, "slug": "annotation", "layer": "Slide", "evidence": "Large purple '31%' arrow annotates the year-over-year delta.", "confidence": 88 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "Specific 270 attacks per company makes the rise tangible.", "confidence": 82 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Two-tone purple distinguishes attempted vs successful.", "confidence": 70 }, { "id": 74, "slug": "inductive-reasoning", "layer": "Loop", "evidence": "First of three data points (attacks, budgets, cloud) building toward alignment thesis.", "confidence": 72 } ], "page_number": 8 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Security investment continues to rise' is the insight.", "confidence": 88 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "82% of respondents reporting budget increases.", "confidence": 80 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Figure 3 referenced for budget trend.", "confidence": 60 } ], "page_number": 9 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Cloud still has a complex relationship with security' states the tension.", "confidence": 85 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "Specific 32% callout.", "confidence": 80 }, { "id": 159, "slug": "contrast-principle", "layer": "Slide", "evidence": "Cloud benefits vs security afterthought framed as tension.", "confidence": 65 } ], "page_number": 10 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Subhead spells out the 4 measures: stop, find, fix, reduce impact.", "confidence": 78 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Comparison table aligns 4 segments x 4 KPIs.", "confidence": 88 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Purple-to-pink gradient ranks Champions first.", "confidence": 80 }, { "id": 133, "slug": "small-multiples", "layer": "Slide", "evidence": "Same metric repeated across 4 segment columns.", "confidence": 82 }, { "id": 132, "slug": "visual-hierarchy", "layer": "Slide", "evidence": "Champions column placed first and highlighted.", "confidence": 70 }, { "id": 87, "slug": "parallel-structure", "layer": "Loop", "evidence": "Sets up parallel intro+perf+value blocks for each segment that follow on p13-21.", "confidence": 80 }, { "id": 16, "slug": "three-pillars", "layer": "Block", "evidence": "Three named segments (Blockers, Risk Takers, Champions) anchor the next 9 pages.", "confidence": 55 } ], "page_number": 12 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Business Blockers' label + definition acts as section title.", "confidence": 80 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Segment-coded purple consistent with quadrant on p6.", "confidence": 60 } ], "page_number": 13 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Callout: 'Blockers outperform Risk Takers and Vulnerable, but lag Champions.'", "confidence": 88 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Two side-by-side bar charts compare 4 segments on breach % and damage %.", "confidence": 85 }, { "id": 139, "slug": "pre-attentive-attributes", "layer": "Slide", "evidence": "Business Blockers bar boxed in dotted outline to mark focus.", "confidence": 85 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Four shades of purple/pink distinguish each segment.", "confidence": 78 }, { "id": 133, "slug": "small-multiples", "layer": "Slide", "evidence": "Same bar layout repeated for two metrics side by side.", "confidence": 75 } ], "page_number": 14 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Body lead: 'Blockers could reduce costs by 48% per attack' = the insight.", "confidence": 88 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Waterfall/value bridge: $611K -> $317K with two reduction components.", "confidence": 92 }, { "id": 138, "slug": "annotation", "layer": "Slide", "evidence": "Big '48%' arrow with 'reduction in cost per successful attack.'", "confidence": 88 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "Specific dollars: $611K, $317K, $294K savings.", "confidence": 82 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Solid purple bar for current vs dotted purple for to-be.", "confidence": 70 } ], "page_number": 15 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Cyber Risk Takers' label + definition mirrors p13.", "confidence": 75 }, { "id": 87, "slug": "parallel-structure", "layer": "Loop", "evidence": "Reuses Blockers template (definition -> perf -> value).", "confidence": 70 } ], "page_number": 16 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Callout: 'Securing more budget doesn't translate to better cyber resilience.'", "confidence": 88 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Comparison bars for Risk Takers across the 4-segment cohort.", "confidence": 78 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Same segment color coding.", "confidence": 70 } ], "page_number": 17 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Body: 'Risk Takers could reduce costs by 65% per attack.'", "confidence": 88 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Same bridge format as p15 for Risk Takers segment.", "confidence": 88 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "$226K savings per attack named explicitly.", "confidence": 80 }, { "id": 138, "slug": "annotation", "layer": "Slide", "evidence": "65% reduction call-out matches p15 pattern.", "confidence": 80 } ], "page_number": 18 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "'Cyber Champions' divider with 'cream of the crop' positioning.", "confidence": 75 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Champion segment color carried through.", "confidence": 60 } ], "page_number": 19 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Callout: Champions experience 8 pp fewer breaches than Blockers, 36 pp fewer than Risk Takers.", "confidence": 85 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Bar comparison of breach incidence across segments.", "confidence": 75 }, { "id": 130, "slug": "color-strategy", "layer": "Slide", "evidence": "Champions bar emphasized.", "confidence": 65 } ], "page_number": 20 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Callout names top countries and industries within Champions.", "confidence": 75 }, { "id": 129, "slug": "chart-selection-guide", "layer": "Slide", "evidence": "Segmentation visual showing Champions composition.", "confidence": 70 } ], "page_number": 21 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Title 'How to be a Cyber Champion' states the so-what for the recommendation block.", "confidence": 92 }, { "id": 132, "slug": "visual-hierarchy", "layer": "Slide", "evidence": "Three icons + labels arranged equal-weight under giant headline.", "confidence": 85 }, { "id": 149, "slug": "typography-hierarchy", "layer": "Slide", "evidence": "Massive white headline dominates; pillar labels secondary.", "confidence": 80 }, { "id": 165, "slug": "picture-superiority-effect", "layer": "Slide", "evidence": "Crossroads photo on right anchors the 'choose your path' metaphor.", "confidence": 70 }, { "id": 121, "slug": "metaphor-analogy", "layer": "Slide", "evidence": "Aerial crossroads image as visual metaphor for the strategic choice.", "confidence": 72 }, { "id": 34, "slug": "the-rule-of-three", "layer": "Block", "evidence": "Exactly 3 pillars (CISO seat, threat-centric, secure cloud) anchor next 3 slides.", "confidence": 92 }, { "id": 16, "slug": "three-pillars", "layer": "Block", "evidence": "Block opens with three icon-labeled pillars elaborated p23-25.", "confidence": 90 } ], "page_number": 22 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Title 'Give CISOs a seat at the top table' is a directive insight.", "confidence": 92 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "Only 19% of Champions have budget authorized by CEO/board.", "confidence": 78 } ], "page_number": 23 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Title 'Be threat-centric and business aligned' is directive.", "confidence": 92 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "87% of Champions measure maturity at least annually, 18 pp more than Blockers.", "confidence": 80 } ], "page_number": 24 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Title 'Get the most out of secure cloud' is the directive.", "confidence": 92 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "83% of Champions vs 70% overall make security a major cloud consideration.", "confidence": 80 } ], "page_number": 25 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Question headline 'Are security and non-security executives on the same page?' frames the gap.", "confidence": 88 }, { "id": 154, "slug": "concrete-language", "layer": "Slide", "evidence": "43% non-security vs 31% security executives on the late-cloud-security gap.", "confidence": 78 }, { "id": 159, "slug": "contrast-principle", "layer": "Slide", "evidence": "Contrast between two exec cohorts is the whole point of the slide.", "confidence": 75 } ], "page_number": 26 }, { "tools": [ { "id": 118, "slug": "action-titles", "layer": "Slide", "evidence": "Headline restates the thesis: cybersecurity and business strategies must align.", "confidence": 90 }, { "id": 124, "slug": "closing-techniques", "layer": "Slide", "evidence": "Closes with vision: 'seize an advantage in the race to cyber resilience.'", "confidence": 82 }, { "id": 155, "slug": "credibility-transfer", "layer": "Slide", "evidence": "Pull-quote attributed to a CISO in the insurance industry.", "confidence": 80 }, { "id": 169, "slug": "authority-bias", "layer": "Slide", "evidence": "External practitioner quote backs the recommendation.", "confidence": 70 }, { "id": 98, "slug": "callback", "layer": "Loop", "evidence": "Recaps attacks, budgets, cloud - the three p8-10 themes.", "confidence": 70 } ], "page_number": 28 } ], "slides_seen": 33, "deck_summary": "Strong textbook Consultant's Gambit: Accenture sets context, defines a 2x2 archetype framework, walks segment-by-segment evidence, then closes with a Rule-of-Three recommendation block - a tight Storymakers fit with action titles and waterfall value bridges throughout.", "secondary_arcs": [], "images_inspected": 6, "slide_frameworks": [ { "frameworks": [ { "name": "2x2 Matrix", "slug": "2x2-matrix", "evidence": "Axes labelled 'Cybersecurity Resilience' (Y) and 'Business Strategy Alignment' (X).", "confidence": 95 } ], "page_number": 6 }, { "frameworks": [ { "name": "Waterfall / Value Bridge", "slug": "waterfall-value-bridge", "evidence": "$611K -> $317K with two stacked reduction components labelled.", "confidence": 88 } ], "page_number": 15 }, { "frameworks": [ { "name": "Waterfall / Value Bridge", "slug": "waterfall-value-bridge", "evidence": "Same bridge layout as p15 applied to Cyber Risk Takers segment.", "confidence": 80 } ], "page_number": 18 }, { "frameworks": [ { "name": "Maturity Model", "slug": "maturity-model", "evidence": "Slide hinges on Champions measuring 'maturity of their cybersecurity program' annually.", "confidence": 60 } ], "page_number": 24 } ] }, "matchedAt": "2026-04-25 23:27:31+00", "slidesSeen": 33, "deckSummary": "Strong textbook Consultant's Gambit: Accenture sets context, defines a 2x2 archetype framework, walks segment-by-segment evidence, then closes with a Rule-of-Three recommendation block - a tight Storymakers fit with action titles and waterfall value bridges throughout.", "imagesInspected": 6, "extractionSeconds": 347.1727 }, "score": { "backend": null, "scoredAt": "2026-04-24 09:23:24+00", "subScores": { "mece_pillars": 73.3, "scqa_opening": 60, "slide_type_mix": 66.72727272727272, "lead_with_answer": 15, "narrative_pacing": 77.72727272727272, "action_title_density": 40 }, "totalScore": 50.8, "coveragePct": 100, "explanations": { "mece_pillars": "6 pillars, balance=0.63", "scqa_opening": "first-third narrative: S", "slide_type_mix": "N21% · S48% · W24% · W6%", "lead_with_answer": "no thesis slide in first third", "narrative_pacing": "9% filler/appendix, middle density 64%", "action_title_density": "8/25 substantive slides have action titles (32%)" }, "slidesAnalyzed": 33 }, "review": { "backend": null, "verdict": "A structurally sound four-act research report with strong MECE pillars and quantified callouts, undermined by seven identically-titled analysis slides and a missing call-to-action — use its section architecture as a teaching example, not its action titles.", "reviewedAt": "2026-04-24 10:45:20+00", "slidesSeen": 33, "suggestions": [ "Rewrite the seven repeated 'Why alignment matters' titles with the specific insight each chart proves (e.g., p.15 → 'Aligning cyber with the business would save Business Blockers $294K per attack')", "Lead p.1 or p.2 with the 78%-don't-know stat or the Cyber Champion cost advantage — state the thesis before the TOC, not on p.6", "Add an explicit 'Where to start' or diagnostic checklist slide between p.28 and the appendix so the deck closes on an imperative, not a restatement", "Sharpen the complication on p.8–10 into one 'so what' slide: attacks up 31%, budgets up 82%, yet breaches still rising — why spending more isn't working" ], "closingScore": 65, "openingScore": 55, "topStrengths": [ "Clear MECE pillar structure via dividers (p.7, 11, 22, 27) that maps to a four-act story", "Recommendation section (p.22–25) uses imperative action titles that tell the reader what to do", "Strong quantified callouts throughout — 270 attacks/company, 48%/65%/71% cost-reduction gradient, $294k and $226k per-attack savings — give the argument teeth", "Persona framework (Blockers / Risk Takers / Champions / Vulnerable) is genuinely MECE and repeats the same three-chart pattern per persona, making the benchmark legible" ], "topWeaknesses": [ "Seven slides (p.12, 14, 15, 17, 18, 20, 21) all carry the identical title 'Why alignment matters' — the biggest title-quality failure in the deck", "No thesis in the first 3 slides; the answer-first principle is violated and the hook on p.5 (78% don't know) is buried behind a divider", "No explicit call-to-action or next-steps slide — p.28 restates the thesis but doesn't tell the reader what to do Monday morning", "Deck ends in five consecutive appendix/front-matter slides (p.29–33), diluting the close" ], "narrativeScore": 72, "pillarCritique": "Dividers are genuine MECE pillars, not topic dumps: 'Where are we now?' → 'Why alignment matters' → 'How to be a Cyber Champion' → 'The path to cyber resilience' maps cleanly to situation → analysis → recommendation → synthesis, with the middle act further sub-divided by the four personas (Blockers, Risk Takers, Champions).", "closingCritique": "p.27–28 deliver a clean 'path to cyber resilience' close with an alignment thesis restated, but there is no crisp call-to-action slide (no next steps, no diagnostic, no 'where to start Monday'). It dissolves into five appendix pages rather than landing on an imperative.", "openingCritique": "The first five slides are cover, TOC, authors, a section divider, and a context slide — the thesis only surfaces on p.6 ('what a difference a year makes…'). The 78% 'executives don't know how cyber will hit them' stat on p.5 is a strong hook that should have been the opener, not the fifth page.", "extractionSeconds": 51.176533, "narrativeCritique": "The deck follows a recognizable S→C→A→R arc — 'Where are we now?' (situation), 'Why alignment matters' (complication/analysis via the four-persona framework), and 'The path to cyber resilience' (resolution). The complication is soft, though: the tension between attacks rising and investment rising never sharpens into an explicit 'so what' before the analysis begins.", "titleQualityScore": 45, "titleQualityCritique": "Titles are split: the 'Where are we now?' section has declarative action titles ('Cyber attacks are up', 'Security investment continues to rise'), but the entire 'Why alignment matters' section (p.12, 14, 15, 17, 18, 20, 21) repeats the same topic-label title seven times instead of stating the insight each chart proves. The recommendation section recovers with strong imperatives ('Give CISOs a seat at the top table', 'Be threat-centric and business aligned')." }, "activistThesis": null, "pitchdeck": { "metadata": null, "profile": null }, "slides": [ { "page": 1, "type": "setup", "function": "front_matter", "imagePath": "https://imgproxy.kitesheet.com/1idCiwgC0RvnwchEX_o-ZtGpJ_d8xMX7DykpOeY7yfc/rs:fit:1200:1200:0/q:82/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9hYmZmZDRjN2VhYWIzN2U4L3AwMDEuanBn", "rawType": "cover", "block": null, "metadata": { "slideType": "cover", "slideTypeCanon": { "name": "Cover", "slug": "cover", "status": "active", "canonId": "019de52d-05f2-729d-9f93-e0504f0a2410", "version": 1, "description": null }, "function": "front_matter", "functionCanon": { "name": "Front matter", "slug": "front_matter", "status": "active", "canonId": "019de52d-133d-73f0-9e26-201eda96b098", "version": 1, "description": null }, "density": "sparse", "densityScore": 9, "componentCount": 3, "textChars": 110, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "subtitle_text", "photo" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:48.384+00", "seconds": 2.394, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/1", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-1", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.05, "w": 0.15, "x": 0.8, "y": 0.08 }, "kind": "image", "text": "accenture", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Logo", "slug": "logo", "status": "active", "canonId": "019de52c-fdaf-743d-94c4-d7c6a0e55302", "version": 1, "description": null }, "framework": null }, "subkind": "logo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.384+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "32bc366c-905c-4755-b0d7-56c68b7efe09", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.6, "x": 0.05, "y": 0.2 }, "kind": "title", "text": "How aligning security and the business creates cyber resilience", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.384+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9a3c3808-6b90-482f-a603-cc45c783d608", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "State of Cybersecurity Resilience 2021", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Subtitle", "slug": "subtitle", "status": "active", "canonId": "019de52c-fb09-739d-900c-815b0d9ac526", "version": 1, "description": null }, "framework": null }, "subkind": "subtitle", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.384+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "816a3250-9160-4439-b489-74dff9c4ae3c", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Slide recipe: Cover", "slug": "cover-slide", "status": "active", "bestFor": null, "canonId": "019df269-2a08-767d-9128-e7431e6fe8a3", "version": 1, "bodyDocId": "019df269-29e5-7738-b5fa-6892e5dc8e65", "description": "The first ten seconds. Build it deliberately.", "familyLabel": "slide-recipe", "categoryName": "Slide", "categorySlug": "slide" }, "agent": "designer", "layer": "slide", "agents": [ "designer" ], "matchId": "1aaa195a-120f-4bbc-bed7-bcab900646ad", "evidence": "How aligning security and the business creates cyber resilience", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:04.134072+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 1, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [], "loops": [], "thumbSrc": "https://imgproxy.kitesheet.com/ca8gzYpeONDvxIutIUhjjvS4k6_EAboi6UG7jb-aJ90/rs:fit:480:480:0/q:78/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9hYmZmZDRjN2VhYWIzN2U4L3AwMDEuanBn", "imagePathAlt": "https://imgproxy.kitesheet.com/4Pyz0bF5bzFQV70NzhZwIHwTD44BfMzILQkmefRPK_U/rs:fit:1200:1200:0/q:82/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9hYmZmZDRjN2VhYWIzN2U4L3AwMDEucG5n", "thumbSrcAlt": "https://imgproxy.kitesheet.com/7GSl5blJPNX0cH2L8xXULknKcB-AXKDtLka9164RoRc/rs:fit:480:480:0/q:78/f:webp/czM6Ly9raXRlc2hlZXQvY29ycHVzL3NsaWRlcy9hYmZmZDRjN2VhYWIzN2U4L3AwMDEucG5n" }, { "page": 2, "type": "setup", "function": "front_matter", "rawType": "table_of_contents", "block": null, "metadata": { "slideType": "table_of_contents", "slideTypeCanon": { "name": "Table of contents", "slug": "table_of_contents", "status": "active", "canonId": "019de52d-0643-721b-9b85-69676bb85cf8", "version": 1, "description": null }, "function": "front_matter", "functionCanon": { "name": "Front matter", "slug": "front_matter", "status": "active", "canonId": "019de52d-133d-73f0-9e26-201eda96b098", "version": 1, "description": null }, "density": "balanced", "densityScore": 29, "componentCount": 4, "textChars": 483, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "numbered_list", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:48.624+00", "seconds": 2.196, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/2", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-2", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.03, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "17b511cc-1371-494f-87b2-4781282724c0", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.4, "x": 0.51, "y": 0.22 }, "kind": "list", "text": "Why alignment matters 11\nBusiness Blockers 13\nCyber Risk Takers 16\nCyber Champions 19\nHow to be a Cyber Champion 22\nThe path to cyber resilience 27\nAbout the research 29", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2848a6b8-7a3c-4a79-b844-e67cc352a948", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.4, "x": 0.05, "y": 0.22 }, "kind": "list", "text": "About the authors 3\nChampioning cybersecurity 4\nWhere are we now? 7\nCyber attacks are up 8\nSecurity investment continues to rise 9\nCloud still has a complex relationship with security 10", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "30324e72-241b-4777-b2ad-a9e19cbabc8d", "parentComponentId": null }, { "bbox": { "h": 0.06, "w": 0.35, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Table of contents", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "92ac4663-b8e6-4181-9f4b-def484d7a103", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 3, "type": "setup", "function": "other", "rawType": "team_bio", "block": null, "metadata": { "slideType": "team_bio", "slideTypeCanon": { "name": "Team bio", "slug": "team_bio", "status": "active", "canonId": "019de52d-0a7d-7394-ae5b-037478e71f1e", "version": 1, "description": null }, "function": "other", "functionCanon": { "name": "Other (fallback)", "slug": "other", "status": "active", "canonId": "019de52d-15e1-75bc-99dc-07732380e2ce", "version": 1, "description": null }, "density": "dense", "densityScore": 74, "componentCount": 10, "textChars": 699, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "headshot", "paragraph", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:49.817+00", "seconds": 3.282, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/3", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-3", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.15, "w": 0.1, "x": 0.51, "y": 0.19 }, "kind": "image", "text": "Ryan M. LaSalle", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "49c9b1b7-7c58-4153-a9b0-71b55f1e0d0e", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.1, "x": 0.28, "y": 0.19 }, "kind": "image", "text": "Jacky Fox", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "89287d92-da99-4699-b24f-53ce050c52ba", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.1, "x": 0.05, "y": 0.19 }, "kind": "image", "text": "Kelly Bissell", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b310e4ed-cea3-4bd8-abbd-f12a50059e3f", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.1, "x": 0.74, "y": 0.19 }, "kind": "image", "text": "Paolo Dal Cin", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Headshot", "slug": "headshot", "status": "active", "canonId": "019de52c-fd5f-765c-9282-38b54f61bbbf", "version": 1, "description": null }, "framework": null }, "subkind": "headshot", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ec9c0937-d26d-47c2-b45a-b75c7519ab97", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.45, "x": 0.05, "y": 0.82 }, "kind": "paragraph", "text": "Acknowledgements: The authors would like to thank Edward Blomquist, Julia Malinska, Anna Marszalik, Eileen Moynihan, Vincenzo Palermo and Ann Vander Hijde for their contributions to this report.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1325fd90-86b6-4d16-b575-58e67efd64fc", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.2, "x": 0.74, "y": 0.45 }, "kind": "paragraph", "text": "Paolo leads the Europe practice for Accenture Security. He has 20 years of experience leading complex projects...", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "44d4991b-f375-49ad-b3b6-8fafba334831", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.2, "x": 0.51, "y": 0.45 }, "kind": "paragraph", "text": "Ryan leads the North America practice for Accenture Security. He is responsible for nurturing the talented teams...", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "468d952b-9790-414e-9aff-a515b362aadd", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.2, "x": 0.05, "y": 0.45 }, "kind": "paragraph", "text": "Kelly leads the Accenture Security business globally. With more than 25 years of security industry experience...", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d4a8a41c-3da2-4351-b976-70ff3d869dfd", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.2, "x": 0.28, "y": 0.45 }, "kind": "paragraph", "text": "Jacky leads the Accenture Security practice in Ireland and serves on the global leadership team...", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dc30dda3-85f6-493e-932d-4aed6e016b8a", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.25, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "About the authors", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.817+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d2481659-a8bd-4c43-a944-cfde7a2b4f72", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Authority Bias", "slug": "authority-bias", "status": "active", "bestFor": null, "canonId": "019dd956-c38d-70b9-a284-b2b479763356", "version": 1, "bodyDocId": null, "description": "Expert opinions are weighted more heavily - cite credible sources", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Architect", "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-21c576540bc1", "evidence": "Named senior authors lend the report expert weight.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 65, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 3, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Credibility Transfer", "slug": "credibility-transfer", "status": "active", "bestFor": null, "canonId": "019dd956-bd34-759a-8e3b-2f14b571a2a1", "version": 1, "bodyDocId": null, "description": "Borrowing authority from trusted sources or vivid details", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-1f5738d048dc", "evidence": "Author bios establish Accenture security-practice authority.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 3, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 4, "type": "setup", "function": "transition", "rawType": "section_divider", "block": null, "metadata": { "slideType": "section_divider", "slideTypeCanon": { "name": "Section divider", "slug": "section_divider", "status": "active", "canonId": "019de52d-066a-7402-9554-6ae504999041", "version": 1, "description": null }, "function": "transition", "functionCanon": { "name": "Transition", "slug": "transition", "status": "active", "canonId": "019de52d-1365-7149-92aa-66df859e75fd", "version": 1, "description": null }, "density": "sparse", "densityScore": 10, "componentCount": 3, "textChars": 136, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "photo" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:48.59+00", "seconds": 1.885, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/4", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-4", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.03, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.59+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "c23086f1-a00c-44f9-9fd7-1306ff653615", "parentComponentId": null }, { "bbox": { "h": 0.85, "w": 0.872, "x": 0.128, "y": 0.09 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.59+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6a5e63d9-47aa-472e-8328-876b82cf1536", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.4, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Championing cybersecurity", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:48.59+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3d9afd40-af4b-49c1-9b88-dc4485f8482b", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Section divider", "slug": "section-divider", "status": "active", "bestFor": null, "canonId": "019dd9e1-4c66-707d-8d1f-6e14547134c7", "version": 1, "bodyDocId": null, "description": "A transitional slide marking the start of a new section.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "2583d2cf-da3b-4b0a-b238-b1ae7e8d66fa", "evidence": "Championing cybersecurity", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.8, "extraction": { "at": "2026-07-16 20:59:04.28072+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 4, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [], "locked": true }, { "page": 5, "type": "setup", "function": "establish_context", "rawType": "situation_overview", "block": null, "metadata": { "slideType": "situation_overview", "slideTypeCanon": { "name": "Situation overview", "slug": "situation_overview", "status": "active", "canonId": "019de52d-0cfe-7769-99aa-9a2fe82a4039", "version": 1, "description": null }, "function": "establish_context", "functionCanon": { "name": "Establish context", "slug": "establish_context", "status": "active", "canonId": "019de52d-1314-74e6-9074-d213dc0bdcdf", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 91, "componentCount": 10, "textChars": 2193, "nDataPoints": 5, "notes": null, "elementsJson": [ "headline_text", "paragraph", "callout_box" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:54.357+00", "seconds": 7.537, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/5", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-5", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.45, "w": 0.29, "x": 0.66, "y": 0.15 }, "kind": "callout", "text": "What is cyber resilience? The cyber-resilient business brings together the capabilities of cybersecurity, business continuity and enterprise resilience. It embeds security across the business ecosystem and applies fluid security strategies to respond quickly to threats, so it can minimize the damage and continue to operate under attack. As a result, the cyber-resilient business can introduce innovative offerings and business models securely across the entire value chain, strengthen customer trust and grow with confidence.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": null, "subkind": { "name": "Primary callout", "slug": "primary", "status": "active", "canonId": "019de52c-fbd1-70eb-a9ce-8997f8674c1d", "version": 1, "description": null }, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "73f49a6f-034c-43f3-9207-01ffdf93ddc7", "parentComponentId": null }, { "bbox": null, "kind": "callout", "text": "Yet, most business executives (78%) said that they don't know how or when a cybersecurity incident will affect their organizations.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:22+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf3-b7263f880914", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9829693c-da73-4973-93ca-e54f22b46bbc", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "CISOs agreeing cybersecurity strategy lacks business-objectives focus: 85%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:22+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf3-bce833d8f362", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.28, "x": 0.35, "y": 0.41 }, "kind": "paragraph", "text": "This year, we continued our exploration of leaders in cyber resilience. Due to the rapid increase in high-profile attacks and sheer complexity of handling cybersecurity demands, we also tested what difference it made to cyber resilience if there was a stronger alignment between cybersecurity practices and the business strategy.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6731543a-4467-480c-ba76-c0304a624dd6", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.35, "y": 0.15 }, "kind": "paragraph", "text": "A majority of respondents (81%) say that “staying ahead of attackers is a constant battle and the cost is unsustainable” compared with 69% in 2020. In fact, we found that respondents experienced a 32% increase over 2020 in the number of successful cyber attacks, while some attacks, such as ransomware, have seen a much higher increase.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d33b69aa-687c-4d81-a3b7-1f05d32835cc", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "In our annual survey among 4,744 global respondents around the current state of cybersecurity resilience, we found that many CISOs feel recognition for their role in fulfilling the business strategy is well overdue—85% agree or strongly agree that the cybersecurity strategy is developed with business objectives, such as growth or market share, in mind.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dc2a732f-5fe2-465e-83c6-4b56420fb482", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.05, "y": 0.43 }, "kind": "paragraph", "text": "Yet, most business executives (78%) said that they don't know how or when a cybersecurity incident will affect their organizations. It's a sentiment that continues to increase from our 2020 report when it was still high at 69%.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "e4384d29-5a8c-4a0e-b3a6-a9cf14961c43", "parentComponentId": null }, { "bbox": null, "kind": "quote", "text": "\"staying ahead of attackers is a constant battle and the cost is unsustainable\"", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": { "name": "Authority citation", "slug": "authority-citation", "status": "active", "bestFor": null, "canonId": "019dd9e1-49ae-7557-89ad-3fca70469b45", "version": 1, "bodyDocId": null, "description": "Quoting an authority figure, study, or precedent to lend weight.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:22+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf3-b9ddf2c2fdf2", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.25, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Championing cybersecurity", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.357+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "03fb8235-d795-4a3a-a6b0-b7f1c7c31e8f", "parentComponentId": null } ], "metrics": [ { "metricRaw": "CISOs agreeing cybersecurity strategy lacks business-objectives focus", "numberRaw": "85%", "numberKind": "percent", "actionTitle": null, "calloutText": "Yet, most business executives (78%) said that they don't know how or when a cybersecurity incident will affect their organizations.", "numberScale": null, "numberValue": 85, "metricFamily": "other", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Pyramid Principle", "slug": "pyramid-principle", "status": "active", "bestFor": "When the document has a single governing decision or recommendation the reader is asked to accept, and the case can be decomposed into a small number of clean groups. Strategy decks, board memos, investment committee papers.", "canonId": "019dd956-7cbd-7219-a477-c871e2bc1aff", "version": 1, "bodyDocId": "88b6ac56-b880-46f9-8621-ef3491ab6235", "description": "Lead with the answer; group three to five MECE supports beneath it; recurse one level down. Top-down hierarchical structure for any document with a single recommendation.", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "block", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-33702d03387c", "evidence": "Top-down: stat then framework on p6 supports the chapter thesis.", "pageRefs": null, "priority": "Core", "whenToUse": "When the document has a single governing decision or recommendation the reader is asked to accept, and the case can be decomposed into a small number of clean groups. Strategy decks, board memos, investment committee papers.", "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": "Solves the two failure modes of expert communication at once: (1) the long climb where readers wait pages for the answer, and (2) logical mush from non-MECE groupings. Progressive disclosure lets a reader stop at any depth and get the right information.", "antipattern": "Chronological structure (\"what we did, what we found, what we conclude\") instead of logical hierarchy. Top-of-pyramid that is a topic (\"strategic options\") instead of an answer (\"pursue Option B because...\"). Non-MECE supports that overlap or fail to cover the universe.", "cardinality": null, "narrativePurpose": "Transfer conviction with minimum reader effort by mirroring how decision-makers consume information: answer first, scaffolding behind." }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-26c9f4baa426", "evidence": "'Championing cybersecurity' frames the chapter's argument.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-2c93f906e172", "evidence": "Specific 78% stat anchors the abstract risk.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Opening Hooks", "slug": "opening-hooks", "status": "active", "bestFor": null, "canonId": "019dd956-aeb0-77d5-bfbd-9cd9a6be8186", "version": 1, "bodyDocId": null, "description": "Techniques to capture attention: Startling statistic, provocative question, short story, analogy, contrast", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-287046460724", "evidence": "Callout opens with startling 78% who don't know how a breach will affect them.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 5, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 6, "from": 5, "loop": { "name": "30_2x2_matrix", "slug": "30-2x2-matrix", "status": "active", "bestFor": "Portfolio analysis, prioritization, strategic positioning", "canonId": "019dd956-7225-756a-9cc7-1e6d3f039818", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "Dimension 1 (X-axis) -> Dimension 2 (Y-axis) -> The Four Quadrants -> The Sweet Spot", "description": "Plot options on two critical dimensions to reveal the optimal quadrant", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-13bc7fb2165e", "evidence": "Page 6 reveals 2x2 with axes 'Cybersecurity Resilience' vs 'Business Strategy Alignment' and 4 named quadrants.", "position": 1, "objective": "Introduce the Cyber Quadrant framework that defines the 4 archetypes", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 6, "type": "setup", "title": "The framework is explicitly labeled 'The cyber quadrant'.", "function": "present_framework", "rawType": "segmentation", "block": null, "metadata": { "slideType": "segmentation", "slideTypeCanon": { "name": "Segmentation", "slug": "segmentation", "status": "active", "canonId": "019de52d-0917-75d5-9172-1b3b3c2f6400", "version": 1, "description": null }, "function": "present_framework", "functionCanon": { "name": "Present framework", "slug": "present_framework", "status": "active", "canonId": "019de52d-1403-7667-9100-d2ac6709f750", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 85, "componentCount": 9, "textChars": 1494, "nDataPoints": 3, "notes": "The framework is explicitly labeled 'The cyber quadrant'.", "elementsJson": [ "headline_text", "subtitle_text", "paragraph", "matrix_2x2", "callout_box" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:49.908+00", "seconds": 2.805, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/6", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-6", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.08, "w": 0.5, "x": 0.35, "y": 0.75 }, "kind": "callout", "text": "Our report shows what a difference a year makes and how leading organizations are demonstrating cybersecurity resilience.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": null, "subkind": { "name": "Primary callout", "slug": "primary", "status": "active", "canonId": "019de52c-fbd1-70eb-a9ce-8997f8674c1d", "version": 1, "description": null }, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "84823fcd-1cc6-450d-b2fc-cf0fd8307063", "parentComponentId": null }, { "bbox": null, "kind": "callout", "text": "Business Blockers stand to reduce their cost of breaches by 48%, Cyber Risk Takers by 65% and The Vulnerable by 71% if they increased their performance to Cyber Champion levels.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:44+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf3-e7bdaf556c71", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.5, "x": 0.35, "y": 0.25 }, "kind": "framework", "text": "The cyber quadrant", "attrs": null, "canon": { "kind": { "name": "Framework", "slug": "framework", "status": "active", "canonId": "019de52c-fa18-77c6-b10a-ccb8277ac0fa", "version": 1, "description": "Named conceptual framework instance." }, "tool": null, "subkind": { "name": "Framework instance", "slug": "instance", "status": "active", "canonId": "019de52d-05a2-72af-be0b-7edc60708a03", "version": 1, "description": null }, "framework": null }, "subkind": "instance", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f4026f62-1f1d-4d12-9a2f-51208ce0316b", "parentComponentId": null }, { "bbox": null, "kind": "framework", "text": "2x2 Matrix", "attrs": null, "canon": { "kind": { "name": "Framework", "slug": "framework", "status": "active", "canonId": "019de52c-fa18-77c6-b10a-ccb8277ac0fa", "version": 1, "description": "Named conceptual framework instance." }, "tool": { "name": "Structuring frame", "slug": "structuring-frame", "status": "active", "bestFor": null, "canonId": "019dd9e1-48ff-708d-8103-a8464743e560", "version": 1, "bodyDocId": null, "description": "A named scaffold for organising content (SCQA, situation-action-result, etc.).", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:44+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf3-ef0e050bcef6", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Breach cost reduction if upgraded to Cyber Champion level (The Vulnerable): 71%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:44+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf3-e82ce04f76dc", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.05, "y": 0.65 }, "kind": "paragraph", "text": "It matters where organizations fall within this cyber quadrant—there’s money on the table. Business Blockers stand to reduce their cost of breaches by 48%, Cyber Risk Takers by 65% and The Vulnerable by 71% if they increased their performance to Cyber Champion levels.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "33e89b31-63ed-4290-9358-e85a69579210", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.05, "y": 0.45 }, "kind": "paragraph", "text": "We also identified two new groups that reflect different approaches to cyber resilience: Business Blockers who put cybersecurity first over alignment with the business strategy and Cyber Risk Takers who put business strategy first over alignment with cybersecurity. The fourth level of cyber resilience we’ve identified as The Vulnerable.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a143da43-695a-4f82-b7b4-023986a70cd3", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "Our research identified four levels of cyber resilience (Figure 1). At the head of the pack is a group of Cyber Champions—organizations that strike a balance, not only excelling at cyber resilience, but also aligning with the business strategy to achieve better business outcomes. They are successful in at least three out of four cyber resilience performance criteria—better at stopping attacks, finding and fixing breaches faster and reducing their impact.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f7dee7c2-9f8f-41ff-b2ed-cc413e4448bc", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.25, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Championing cybersecurity", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "70773d06-b0b9-4f44-b4dc-a3fd052f836e", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Breach cost reduction if upgraded to Cyber Champion level (The Vulnerable)", "numberRaw": "71%", "numberKind": "percent", "actionTitle": "Our report shows what a difference a year makes and how leading organizations are demonstrating cybersecurity resilience.", "calloutText": "Business Blockers stand to reduce their cost of breaches by 48%, Cyber Risk Takers by 65% and The Vulnerable by 71% if they increased their performance to Cyber Champion levels.", "numberScale": null, "numberValue": 71, "metricFamily": "cost_savings", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Contrast Pairs", "slug": "contrast-pairs", "status": "active", "bestFor": null, "canonId": "019dd956-9b77-70d3-88b1-f34e26f60860", "version": 1, "bodyDocId": null, "description": "Creating tension through opposites: Before↔After, Problem↔Solution, Pain↔Relief", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Storyteller", "layer": "loop", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-4c0e0e3055ba", "evidence": "Quadrant sets up Champions vs Vulnerable contrast that runs through the deck.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "2x2 matrix", "slug": "matrix-2x2", "status": "active", "bestFor": null, "canonId": "019dd9e1-50ab-72d1-8afb-3ab0a38e32a8", "version": 1, "bodyDocId": null, "description": "BCG matrix, importance/urgency, any axes-and-quadrants frame.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3f721837-4b0a-4970-af76-704e3237e3ee", "evidence": "The cyber quadrant", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 20:59:04.39164+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-37d20a3868fc", "evidence": "Title states the so-what: 'what a difference a year makes... leading orgs demonstrating cyber resilience.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-380a2b48f612", "evidence": "2x2 quadrant chart matches the categorical comparison.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-3d7e346f9438", "evidence": "Cyber Champions quadrant filled in deep purple to mark the target.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Nudge", "slug": "nudge", "status": "active", "bestFor": null, "canonId": "019dd956-c61a-72f9-920c-88acf4ecc336", "version": 1, "bodyDocId": null, "description": "Subtle hints can significantly affect decisions - strategic CTA placement", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Architect", "Designer" ], "matchId": "019dd95a-0d40-7758-be36-4b40c39ecd61", "evidence": "Visual nudge toward the top-right Champions quadrant.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 62, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Visual Hierarchy", "slug": "visual-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-b2ca-706b-937f-e52441086fd7", "version": 1, "bodyDocId": null, "description": "Order of perception through Size > Color > Position > Weight > Space", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-40145cccee65", "evidence": "Quadrant labels typeset large; descriptions secondary.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Von Restorff Effect", "slug": "von-restorff-effect", "status": "active", "bestFor": null, "canonId": "019dd956-beab-73d8-9f62-30d0332e926e", "version": 1, "bodyDocId": null, "description": "Items that stand out are noticed and remembered - make key points visually distinct", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-44feb29f8179", "evidence": "Champions cell visually distinct from the other three to mark the goal.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "019dd95a-1ca5-70bb-bb9c-9cdee52a347a", "evidence": "Axes labelled 'Cybersecurity Resilience' (Y) and 'Business Strategy Alignment' (X).", "framework": null, "confidence": 95, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "frameworkName": "2x2 Matrix" }, { "matchId": "0459ad8a-e131-4af6-9126-0f929c4f4d5b", "evidence": "The slide presents a 2x2 matrix titled 'The cyber quadrant' mapping Cybersecurity Resilience against Business Strategy Alignment.", "framework": null, "confidence": 1, "extraction": { "at": "2026-05-02 19:51:49.908+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 6, "frameworkName": "matrix-2x2" } ], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 6, "from": 5, "loop": { "name": "30_2x2_matrix", "slug": "30-2x2-matrix", "status": "active", "bestFor": "Portfolio analysis, prioritization, strategic positioning", "canonId": "019dd956-7225-756a-9cc7-1e6d3f039818", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "Dimension 1 (X-axis) -> Dimension 2 (Y-axis) -> The Four Quadrants -> The Sweet Spot", "description": "Plot options on two critical dimensions to reveal the optimal quadrant", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-13bc7fb2165e", "evidence": "Page 6 reveals 2x2 with axes 'Cybersecurity Resilience' vs 'Business Strategy Alignment' and 4 named quadrants.", "position": 1, "objective": "Introduce the Cyber Quadrant framework that defines the 4 archetypes", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 7, "type": "setup", "function": "establish_context", "rawType": "situation_overview", "block": null, "metadata": { "slideType": "situation_overview", "slideTypeCanon": { "name": "Situation overview", "slug": "situation_overview", "status": "active", "canonId": "019de52d-0cfe-7769-99aa-9a2fe82a4039", "version": 1, "description": null }, "function": "establish_context", "functionCanon": { "name": "Establish context", "slug": "establish_context", "status": "active", "canonId": "019de52d-1314-74e6-9074-d213dc0bdcdf", "version": 1, "description": null }, "density": "sparse", "densityScore": 18, "componentCount": 4, "textChars": 239, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "icon_grid", "photo", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.474+00", "seconds": 4.822, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/7", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-7", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.03, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.474+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "823687b5-9d01-4809-be08-4a522c8e4809", "parentComponentId": null }, { "bbox": { "h": 0.77, "w": 0.44, "x": 0.51, "y": 0.09 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.474+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "23e70d6d-68c4-4801-8bb3-17a00ae36046", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.4, "x": 0.05, "y": 0.42 }, "kind": "list", "text": "Cyber attacks are up\nSecurity investment continues to rise\nCloud still has a complex relationship with security", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.474+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7374e4b3-3845-442e-a649-5561645da4f7", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Where are we now?", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.474+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d3c62c44-2371-4945-8c3e-f290a51b42e8", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [], "locked": true }, { "page": 8, "type": "analysis", "title": "The slide uses a stacked bar chart to show the growth in attempted vs successful attacks between 2020 and 2021.", "function": "summarize", "rawType": "industry_trends", "block": null, "metadata": { "slideType": "industry_trends", "slideTypeCanon": { "name": "Industry trends", "slug": "industry_trends", "status": "active", "canonId": "019de52d-0b1d-7705-a0e0-c663199cd1fa", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 79, "componentCount": 8, "textChars": 1174, "nDataPoints": 6, "notes": "The slide uses a stacked bar chart to show the growth in attempted vs successful attacks between 2020 and 2021.", "elementsJson": [ "action_title", "subtitle_text", "paragraph", "bar_chart_stacked", "big_number", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:50.776+00", "seconds": 2.755, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/8", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-8", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "There were on average 270 attacks (unauthorized access of data, applications, services, networks or devices) per company over the year, an increase of 31% compared with 2020.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:55+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-094812fbfdeb", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.25, "x": 0.65, "y": 0.25 }, "kind": "chart", "text": "Figure 2. Average attacks per company up 31%", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Stacked bar chart", "slug": "bar-stacked", "status": "active", "canonId": "019de52c-feec-74bf-9028-15b74f84f0a7", "version": 1, "description": null }, "framework": null }, "subkind": "bar-stacked", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.776+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d98dc529-66db-4839-94ff-9baac83da4b7", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Average attacks per company: 270", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 03:59:55+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-0fbef579cf5e", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.35, "y": 0.25 }, "kind": "paragraph", "text": "Third-party risk continues to dominate. Indirect attacks—by which we mean successful breaches to the organization through the supply chain—have increased from 44% to 61%. And the impact of cybersecurity has hit hard in the boardroom; in an analysis of more than 500 companies' 2020 earnings reports, there's an increase in legal (23%), economic (16%) and internal (10%) discussions around cybersecurity consequences compared with 2019, suggesting an elevation in prioritizing the subject.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.776+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "008aa34e-464e-4b82-962a-33e0c5eef702", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.05, "y": 0.25 }, "kind": "paragraph", "text": "Even a global pandemic can't stop cyber criminals—if anything, the vulnerability and uncertainty was a breeding ground for new attacks. There were on average 270 attacks per company over the year, an increase of 31% compared with 2020 (Figure 2).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.776+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1809bbeb-f8fd-4136-b8a9-c42b6944d093", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.25, "x": 0.65, "y": 0.78 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity surveys Wave 3 report published in January 2020 (N=4,644) and Wave 4 report published in November 2021 (N=4,744)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.776+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "aaede673-fad8-42cc-a275-092e7f767edc", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.4, "x": 0.05, "y": 0.13 }, "kind": "title", "text": "Cyber attacks are up", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.776+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "703d4e86-7e88-4a99-a58c-95300a939144", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.15, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Where are we now?", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Subtitle", "slug": "subtitle", "status": "active", "canonId": "019de52c-fb09-739d-900c-815b0d9ac526", "version": 1, "description": null }, "framework": null }, "subkind": "subtitle", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.776+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7b632bde-3e6d-4a18-b654-180b05368630", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Average attacks per company", "numberRaw": "270", "numberKind": "plain", "actionTitle": "Cyber attacks are up", "calloutText": "There were on average 270 attacks (unauthorized access of data, applications, services, networks or devices) per company over the year, an increase of 31% compared with 2020.", "numberScale": null, "numberValue": 270, "metricFamily": "other", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Inductive Reasoning", "slug": "inductive-reasoning", "status": "active", "bestFor": null, "canonId": "019dd956-99c6-705e-94cc-76a504c3da37", "version": 1, "bodyDocId": null, "description": "Grouping similar evidence to form a conclusion (Evidence → Pattern → Conclusion)", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Architect", "layer": "loop", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-65390e21cab1", "evidence": "First of three data points (attacks, budgets, cloud) building toward alignment thesis.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 72, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-514e250ca541", "evidence": "'Cyber attacks are up' is the so-what, not the topic.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Annotation", "slug": "annotation", "status": "active", "bestFor": null, "canonId": "019dd956-b5b9-7668-bf0e-3af99823ec5c", "version": 1, "bodyDocId": null, "description": "Adding explanatory labels to highlight key data points", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-5b01dfc65f30", "evidence": "Large purple '31%' arrow annotates the year-over-year delta.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-5441cbad28f9", "evidence": "Stacked bars compare 2020 vs 2021 attempted/successful counts.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-61f63d29649e", "evidence": "Two-tone purple distinguishes attempted vs successful.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-5e9bc3827272", "evidence": "Specific 270 attacks per company makes the rise tangible.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 8, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 10, "from": 8, "loop": { "name": "03_aha_moment", "slug": "03-aha-moment", "status": "active", "bestFor": "Data-heavy sections, research findings, analytical arguments", "canonId": "019dd956-66f4-7668-ab25-cec9c996c0bc", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Problem/Question -> What the Data Shows -> The Insight", "description": "Establish a tension, present data, then deliver the insight that changes everything", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-14444217b104", "evidence": "Three sequential data findings (270 attacks, 82% budgets up, 32% cloud gap) building to the alignment thesis.", "position": 2, "objective": "Show the data on where the cybersecurity world is now", "confidence": 78, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 9, "type": "analysis", "title": "Includes a bar chart showing budget increase distribution and a pull-quote.", "function": "summarize", "rawType": "industry_trends", "block": null, "metadata": { "slideType": "industry_trends", "slideTypeCanon": { "name": "Industry trends", "slug": "industry_trends", "status": "active", "canonId": "019de52d-0b1d-7705-a0e0-c663199cd1fa", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 90, "componentCount": 10, "textChars": 1539, "nDataPoints": 8, "notes": "Includes a bar chart showing budget increase distribution and a pull-quote.", "elementsJson": [ "action_title", "headline_text", "paragraph", "bar_chart_horizontal", "big_number", "quote_block", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.597+00", "seconds": 3.525, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/9", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-9", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "IT security budgets are increasing, with more than 82% of our survey respondents saying their budgets have increased in the last year (Figure 3).", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:18+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-5140b8986f12", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.25, "x": 0.35, "y": 0.52 }, "kind": "chart", "text": "Figure 3. 2021 Cybersecurity spending increase compared with 2020", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Horizontal bar chart", "slug": "bar-horizontal", "status": "active", "canonId": "019de52c-fec4-7221-986b-1cb5f5e84b1f", "version": 1, "description": null }, "framework": null }, "subkind": "bar-horizontal", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "c75d8dd4-1522-4b9e-97e2-defe49e5404f", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.05, "x": 0.57, "y": 0.6 }, "kind": "metric", "text": "82%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": null, "subkind": { "name": "Big number", "slug": "big-number", "status": "active", "canonId": "019de52c-fc70-70c8-b965-0584548a9204", "version": 1, "description": null }, "framework": null }, "subkind": "big-number", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6fb8fad6-ae0d-4edc-869d-9e7ddbf10486", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Budgets have increased over last year: 82%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:18+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-5bb6cabeb3c5", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.3, "x": 0.05, "y": 0.52 }, "kind": "paragraph", "text": "This may be the COVID-19 change event—the massive and rapid shift in how they ran their businesses and increased security demands; we won't know until next year if this kind of investment will continue but we do know that budgets are always under scrutiny. Rapid cloud adoption may also contribute to this investment increase since many security tools have to be updated to accommodate cloud or more robust security is needed in a digital world.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "19fc7cdc-2b73-4de4-8cad-5c927537910a", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.05, "y": 0.27 }, "kind": "paragraph", "text": "IT security budgets are increasing, with more than 82% of our survey respondents saying their budgets have increased in the last year (Figure 3). IT security budgets are now up to 15% of total IT spend, 5 percentage points higher than the spend reported in 2020.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6554e7f9-7146-477c-8274-b695d090c2ff", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.66, "y": 0.3 }, "kind": "quote", "text": "During my four year tenure, we tripled, maybe quadrupled the security budget. We were starting from ground zero, so we had to overinvest in security systems and infrastructure to get it up to where it needed to be.", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": null, "subkind": { "name": "Pull quote", "slug": "pull-quote", "status": "active", "canonId": "019de52c-fbf9-76fe-97e1-a0b7540445c9", "version": 1, "description": null }, "framework": null }, "subkind": "pull-quote", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "70e9f205-de26-495c-81b4-d71f44acfd26", "parentComponentId": null }, { "bbox": null, "kind": "quote", "text": "\"During my four year tenure, we tripled, maybe quadrupled the security budget. We were starting from ground zero, so we had to overinvest in security systems and infrastructure to get it up to where it needed to be.\" — Global Head of IT, Pharmaceutical Company", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": { "name": "Authority citation", "slug": "authority-citation", "status": "active", "bestFor": null, "canonId": "019dd9e1-49ae-7557-89ad-3fca70469b45", "version": 1, "bodyDocId": null, "description": "Quoting an authority figure, study, or precedent to lend weight.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:18+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-56a3ef075875", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.2, "x": 0.35, "y": 0.78 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021 (N=4,744)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2423ba4c-7166-4a16-ba75-eff12136e3c3", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.55, "x": 0.11, "y": 0.16 }, "kind": "title", "text": "Security investment continues to rise", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.597+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9cc07362-998f-400f-b2a7-a18283acac05", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Budgets have increased over last year", "numberRaw": "82%", "numberKind": "percent", "actionTitle": "Security investment continues to rise", "calloutText": "IT security budgets are increasing, with more than 82% of our survey respondents saying their budgets have increased in the last year (Figure 3).", "numberScale": null, "numberValue": 82, "metricFamily": "market_size", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-6954ea86051b", "evidence": "'Security investment continues to rise' is the insight.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 9, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-7145f53b7e4f", "evidence": "Figure 3 referenced for budget trend.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 9, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-6cdbef63e1b8", "evidence": "82% of respondents reporting budget increases.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 9, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 10, "from": 8, "loop": { "name": "03_aha_moment", "slug": "03-aha-moment", "status": "active", "bestFor": "Data-heavy sections, research findings, analytical arguments", "canonId": "019dd956-66f4-7668-ab25-cec9c996c0bc", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Problem/Question -> What the Data Shows -> The Insight", "description": "Establish a tension, present data, then deliver the insight that changes everything", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-14444217b104", "evidence": "Three sequential data findings (270 attacks, 82% budgets up, 32% cloud gap) building to the alignment thesis.", "position": 2, "objective": "Show the data on where the cybersecurity world is now", "confidence": 78, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 10, "type": "analysis", "title": "The slide uses a donut chart to visualize survey responses regarding security involvement in cloud discussions.", "function": "establish_context", "rawType": "industry_trends", "block": null, "metadata": { "slideType": "industry_trends", "slideTypeCanon": { "name": "Industry trends", "slug": "industry_trends", "status": "active", "canonId": "019de52d-0b1d-7705-a0e0-c663199cd1fa", "version": 1, "description": null }, "function": "establish_context", "functionCanon": { "name": "Establish context", "slug": "establish_context", "status": "active", "canonId": "019de52d-1314-74e6-9074-d213dc0bdcdf", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 92, "componentCount": 11, "textChars": 1651, "nDataPoints": 6, "notes": "The slide uses a donut chart to visualize survey responses regarding security involvement in cloud discussions.", "elementsJson": [ "action_title", "subtitle_text", "paragraph", "donut_chart", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:56.656+00", "seconds": 8.485, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/10", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-10", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Nearly one-third (32%) say security is not part of the cloud discussion from the outset and their organization is trying to catch up", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:16+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-2ce23294adc3", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.25, "x": 0.65, "y": 0.35 }, "kind": "chart", "text": "Figure 4. Nearly one-third of respondents say security is not part of the cloud discussion", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Donut chart", "slug": "donut", "status": "active", "canonId": "019de52d-0006-752c-9528-0fef476b8004", "version": 1, "description": null }, "framework": null }, "subkind": "donut", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d13cb94a-8f35-468a-b87e-0ac7b3d31b13", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Respondents saying security is not part of the cloud discussion: 32%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:16+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-3082d9dfd088", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.25, "x": 0.35, "y": 0.52 }, "kind": "paragraph", "text": "And reasons preventing the take up of the cloud revolve around security issues: about one-third of all respondents say poor governance and compliance practices around cloud security are a problem, that cloud security is too complex and that they do not have the skills internally to structure a proper cloud security framework.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3890dda3-df61-4cfe-831f-d565d0a06cda", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.25, "x": 0.35, "y": 0.33 }, "kind": "paragraph", "text": "Yet, despite most of our survey respondents believing that cloud applications and operations are more secure than those hosted on-premise, nearly one-third (32%) say security is not part of the cloud discussion from the outset and their organization is trying to catch up (Figure 4).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a033f115-8241-4946-95df-37bd511156cb", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.25, "x": 0.05, "y": 0.72 }, "kind": "paragraph", "text": "Our cyber resilience survey respondents have moved their operations to the cloud because they recognize the benefits such as lower costs, more resilient operations and access to more advanced technology.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a895f3e1-519c-4bee-acff-5e6fb4ef2627", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.25, "x": 0.05, "y": 0.55 }, "kind": "paragraph", "text": "This is echoed in our recent technology innovation strategies research which found that the top 10% of respondents doubled down on technology investment during the pandemic—72% accelerated investment in security.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b9997476-e1b5-41d0-ad77-3da56b0bee21", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.25, "x": 0.05, "y": 0.33 }, "kind": "paragraph", "text": "Over the next three to five years, more than two-thirds of workloads will shift to the cloud, with about one-third of organizations moving more than 75% into the cloud across most regions of the world.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "fab8b0ab-87fb-4a16-8c11-c3a3c48f6bab", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.25, "x": 0.65, "y": 0.8 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021 (N=4,744)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "25392194-260f-47c3-9998-16ce49bd161b", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.45, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Cloud still has a complex relationship with security", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "21254e0e-52b2-4d22-9112-520dbf7ff69f", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.15, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Where are we now?", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Subtitle", "slug": "subtitle", "status": "active", "canonId": "019de52c-fb09-739d-900c-815b0d9ac526", "version": 1, "description": null }, "framework": null }, "subkind": "subtitle", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:56.656+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ff86973d-c9f5-4cdc-8bb3-314d5a7eb566", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Respondents saying security is not part of the cloud discussion", "numberRaw": "32%", "numberKind": "percent", "actionTitle": "Cloud still has a complex relationship with security", "calloutText": "Nearly one-third (32%) say security is not part of the cloud discussion from the outset and their organization is trying to catch up", "numberScale": null, "numberValue": 32, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-774d1210ced2", "evidence": "'Cloud still has a complex relationship with security' states the tension.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-78153e3d94e2", "evidence": "Specific 32% callout.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Contrast Principle", "slug": "contrast-principle", "status": "active", "bestFor": null, "canonId": "019dd956-bf0f-73ae-b9df-e60508cdaa65", "version": 1, "bodyDocId": null, "description": "Higher visual weight draws attention - use contrast strategically for emphasis", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-7c584c1ac5f7", "evidence": "Cloud benefits vs security afterthought framed as tension.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 65, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "ab7d99b8-cfcb-494f-aac8-f36fe2ab5fff", "evidence": "Waterfall chart showing reduction from $611,000 to $317,000", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:06.377206+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 10, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 10, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 4, "name": "Situation & Context", "beatId": "019dd95a-0680-7418-820b-e58807010fdf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Situation & Context", "slug": "consultants-gambit-situation-context", "status": "active", "canonId": "019dd9b8-05ae-741b-992d-65ee83c639b3", "version": 1, "description": null }, "evidence": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging.", "position": 1, "isPrimaryArc": true, "parentBeatType": { "name": "Setup", "slug": "setup", "status": "active", "canonId": "019dd9b8-020e-7505-af9b-d9b9a4679bcc", "version": 1, "description": "Where the deck grounds the reader before doing anything else. Almost every arc opens here." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 10, "from": 8, "loop": { "name": "03_aha_moment", "slug": "03-aha-moment", "status": "active", "bestFor": "Data-heavy sections, research findings, analytical arguments", "canonId": "019dd956-66f4-7668-ab25-cec9c996c0bc", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Problem/Question -> What the Data Shows -> The Insight", "description": "Establish a tension, present data, then deliver the insight that changes everything", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-14444217b104", "evidence": "Three sequential data findings (270 attacks, 82% budgets up, 32% cloud gap) building to the alignment thesis.", "position": 2, "objective": "Show the data on where the cybersecurity world is now", "confidence": 78, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 11, "type": "setup", "function": "transition", "rawType": "section_divider", "block": null, "metadata": { "slideType": "section_divider", "slideTypeCanon": { "name": "Section divider", "slug": "section_divider", "status": "active", "canonId": "019de52d-066a-7402-9554-6ae504999041", "version": 1, "description": null }, "function": "transition", "functionCanon": { "name": "Transition", "slug": "transition", "status": "active", "canonId": "019de52d-1365-7149-92aa-66df859e75fd", "version": 1, "description": null }, "density": "sparse", "densityScore": 9, "componentCount": 3, "textChars": 132, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "photo", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:50.625+00", "seconds": 2.39, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/11", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-11", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.03, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.625+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "c9a195e7-96ab-462e-bfbe-2f35af8b7984", "parentComponentId": null }, { "bbox": { "h": 0.766, "w": 0.744, "x": 0.128, "y": 0.094 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.625+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2eecbc20-df92-461d-8045-ca3943714439", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.45, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:50.625+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "e6f4d662-9671-426b-9bd6-669ea543ec5b", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 14, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 11, "name": "Problem & Complication", "beatId": "019dd95a-0680-7418-820b-e8cd5d8a7ecc", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Problem & Complication", "slug": "consultants-gambit-problem-complication", "status": "active", "canonId": "019dd9b8-064a-777f-a374-e9a8c43dedd4", "version": 1, "description": null }, "evidence": "'Why alignment matters' divider + Business Blockers lag Champions on key measures.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [], "locked": true }, { "page": 12, "type": "analysis", "title": "The slide uses a segmentation framework to categorize organizations based on cyber resilience performance.", "function": "analyze_data", "rawType": "data_table", "block": null, "metadata": { "slideType": "data_table", "slideTypeCanon": { "name": "Data table", "slug": "data_table", "status": "active", "canonId": "019de52d-0bbd-71b9-9918-417f904abbf8", "version": 1, "description": null }, "function": "analyze_data", "functionCanon": { "name": "Analyze data", "slug": "analyze_data", "status": "active", "canonId": "019de52d-1590-7413-8c82-cc218cff40b4", "version": 1, "description": null }, "density": "dense", "densityScore": 72, "componentCount": 7, "textChars": 1007, "nDataPoints": 16, "notes": "The slide uses a segmentation framework to categorize organizations based on cyber resilience performance.", "elementsJson": [ "headline_text", "paragraph", "comparison_table", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.7+00", "seconds": 3.394, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/12", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-12", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "This year's research continued to explore how winning organizations tackle cyber resilience, evaluating their responses based on the following key measures of cyber resilience: they stop more attacks, find and fix breaches faster and reduce breach impact.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:47+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-804801ecb0f8", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "% breaches fixed in 15 days or less (Cyber Champions): 100%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:47+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-86e353a9e082", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "This year's research continued to explore how winning organizations tackle cyber resilience, evaluating their responses based on the following key measures of cyber resilience: they stop more attacks, find and fix breaches faster and reduce breach impact.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "660cd517-b977-4e46-8dd0-851648bf4b9c", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.5, "x": 0.35, "y": 0.68 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=3,455: Cyber Champions N=172, Business Blockers N=522, Cyber Risk Takers N=885, The Vulnerable N=1,876)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3b1bdca4-a69d-46d9-98e2-b44b7064e4bb", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.6, "x": 0.35, "y": 0.2 }, "kind": "table", "text": "Table comparing Cyber Champions, Business Blockers, Cyber Risk Takers, and The Vulnerable across 4 metrics: Stop more attacks, Find breaches faster, Fix breaches faster, Reduce breach impact.", "attrs": null, "canon": { "kind": { "name": "Table", "slug": "table", "status": "active", "canonId": "019de52c-f9c8-7148-8119-eaac9594cd28", "version": 1, "description": "Tabular data layout." }, "tool": null, "subkind": { "name": "Data table", "slug": "data", "status": "active", "canonId": "019de52d-02d5-75b8-8abf-88e92bf63569", "version": 1, "description": null }, "framework": null }, "subkind": "data", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0fd0fa7d-673e-40ce-8f16-18a786554e31", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6f0d3eea-535e-48ec-bc57-d21d719a9037", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.3, "x": 0.35, "y": 0.15 }, "kind": "title", "text": "Figure 5. Key measures of cyber resilience", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "fb991ac7-be80-46a1-bbf0-81f0fb0b0472", "parentComponentId": null } ], "metrics": [ { "metricRaw": "% breaches fixed in 15 days or less (Cyber Champions)", "numberRaw": "100%", "numberKind": "percent", "actionTitle": null, "calloutText": "This year's research continued to explore how winning organizations tackle cyber resilience, evaluating their responses based on the following key measures of cyber resilience: they stop more attacks, find and fix breaches faster and reduce breach impact.", "numberScale": null, "numberValue": 100, "metricFamily": "other", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Three Pillars", "slug": "three-pillars", "status": "active", "bestFor": null, "canonId": "019dd956-81ef-7455-a365-b234d95a6bbb", "version": 1, "bodyDocId": null, "description": "Three major supporting arguments that are MECE and address key concerns", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "block", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-990f5ed0cde1", "evidence": "Three named segments (Blockers, Risk Takers, Champions) anchor the next 9 pages.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 55, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Parallel Structure", "slug": "parallel-structure", "status": "active", "bestFor": null, "canonId": "019dd956-9f34-762a-93b7-1d8e84bbd153", "version": 1, "bodyDocId": null, "description": "Using similar grammatical structure for related ideas", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Architect", "layer": "loop", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-9772f36e5656", "evidence": "Sets up parallel intro+perf+value blocks for each segment that follow on p13-21.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-81f60e77dbc7", "evidence": "Subhead spells out the 4 measures: stop, find, fix, reduce impact.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-84a0ab18de3b", "evidence": "Comparison table aligns 4 segments x 4 KPIs.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-889426635a07", "evidence": "Purple-to-pink gradient ranks Champions first.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Small Multiples", "slug": "small-multiples", "status": "active", "bestFor": null, "canonId": "019dd956-b32d-7586-b368-baa1dd388ed4", "version": 1, "bodyDocId": null, "description": "Repeating similar charts for comparison across categories or time", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-8c14b3eaf71a", "evidence": "Same metric repeated across 4 segment columns.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Visual Hierarchy", "slug": "visual-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-b2ca-706b-937f-e52441086fd7", "version": 1, "bodyDocId": null, "description": "Order of perception through Size > Color > Position > Weight > Space", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-90549f97cc24", "evidence": "Champions column placed first and highlighted.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "6cb6d4c2-e989-4c7b-9a02-efca1ce0a8fd", "evidence": "Categorization of organizations into four distinct groups based on cyber resilience performance.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:51.7+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 12, "frameworkName": "audience-segmentation" } ], "arcBeats": [ { "to": 14, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 11, "name": "Problem & Complication", "beatId": "019dd95a-0680-7418-820b-e8cd5d8a7ecc", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Problem & Complication", "slug": "consultants-gambit-problem-complication", "status": "active", "canonId": "019dd9b8-064a-777f-a374-e9a8c43dedd4", "version": 1, "description": null }, "evidence": "'Why alignment matters' divider + Business Blockers lag Champions on key measures.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 13, "type": "tension", "title": "The slide uses a metaphor of bridges and traffic to represent alignment or flow.", "function": "frame_problem", "rawType": "pain_points", "block": null, "metadata": { "slideType": "pain_points", "slideTypeCanon": { "name": "Pain points", "slug": "pain_points", "status": "active", "canonId": "019de52d-08a0-761d-a14f-1dbc5e447381", "version": 1, "description": null }, "function": "frame_problem", "functionCanon": { "name": "Frame problem", "slug": "frame_problem", "status": "active", "canonId": "019de52d-13db-753e-ad70-e9b2d0dab398", "version": 1, "description": null }, "density": "balanced", "densityScore": 44, "componentCount": 6, "textChars": 505, "nDataPoints": 0, "notes": "The slide uses a metaphor of bridges and traffic to represent alignment or flow.", "elementsJson": [ "headline_text", "paragraph", "photo", "footnote" ], "confidence": 0.9, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.328+00", "seconds": 2.909, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/13", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-13", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Business Blockers take a security-first approach and place less emphasis on alignment with the business strategy. They are sometimes seen as an impediment to business objectives.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:49+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-9ca9feef2e15", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.4, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.328+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "cb8cbe3b-cb1b-4b6a-9efc-fea3cc29caba", "parentComponentId": null }, { "bbox": { "h": 0.735, "w": 0.664, "x": 0.281, "y": 0.158 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.328+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "295688d2-e5de-4295-8866-ffeea52a18dc", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.35, "x": 0.05, "y": 0.38 }, "kind": "paragraph", "text": "Business Blockers take a security-first approach and place less emphasis on alignment with the business strategy. They are sometimes seen as an impediment to business objectives.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.328+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7eed01b9-b7ad-4873-8b1c-62fd56e642ee", "parentComponentId": null }, { "bbox": { "h": 0.06, "w": 0.25, "x": 0.05, "y": 0.28 }, "kind": "title", "text": "Business Blockers", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.328+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ce580629-71b6-4973-bd7f-00d6d4140791", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.15, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Subtitle", "slug": "subtitle", "status": "active", "canonId": "019de52c-fb09-739d-900c-815b0d9ac526", "version": 1, "description": null }, "framework": null }, "subkind": "subtitle", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.328+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4ee64df5-239e-49c7-bc13-b21913b40e15", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-9cca18869c80", "evidence": "'Business Blockers' label + definition acts as section title.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 13, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-a293b860e39e", "evidence": "Segment-coded purple consistent with quadrant on p6.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 13, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 14, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 11, "name": "Problem & Complication", "beatId": "019dd95a-0680-7418-820b-e8cd5d8a7ecc", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Problem & Complication", "slug": "consultants-gambit-problem-complication", "status": "active", "canonId": "019dd9b8-064a-777f-a374-e9a8c43dedd4", "version": 1, "description": null }, "evidence": "'Why alignment matters' divider + Business Blockers lag Champions on key measures.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 14, "type": "resolution", "title": "The slide uses a specific segmentation: Cyber Champions, Business Blockers, Cyber Risk Takers, and The Vulnerable.", "function": "summarize", "rawType": "key_takeaways", "block": null, "metadata": { "slideType": "key_takeaways", "slideTypeCanon": { "name": "Key takeaways", "slug": "key_takeaways", "status": "active", "canonId": "019de52d-06e7-7674-a891-9f7de3b11b6d", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "dense", "densityScore": 71, "componentCount": 7, "textChars": 1025, "nDataPoints": 8, "notes": "The slide uses a specific segmentation: Cyber Champions, Business Blockers, Cyber Risk Takers, and The Vulnerable.", "elementsJson": [ "headline_text", "paragraph", "bar_chart_vertical", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:54.901+00", "seconds": 6.439, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/14", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-14", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Business Blockers outperform Cyber Risk Takers and The Vulnerable, but lag Cyber Champions across all key measures of cyber resilience.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:55+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-b53287aad977", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.58, "x": 0.36, "y": 0.448 }, "kind": "chart", "text": "Figure 6. Impact of breaches on Business Blockers", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "fb1fce95-6f3b-4c84-807d-563f7f50927a", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Percentage of attacks that result in a breach: 25%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:00:55+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-bac37afce5b5", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "Business Blockers outperform Cyber Risk Takers and The Vulnerable, but lag Cyber Champions across all key measures of cyber resilience. As illustrated in Figure 6, they experience fewer breaches than Cyber Risk Takers and The Vulnerable, but 8 percentage points more than Cyber Champions (17%).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7b2c09b4-6fbd-4af0-aaf1-9040e070f438", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.3, "x": 0.36, "y": 0.15 }, "kind": "paragraph", "text": "Business Blockers also have the highest percentage of CISOs with full authority to approve budgets (32%) versus Cyber Champions (21%), Cyber Risk Takers (21%) and The Vulnerable (16%). This CISO-driven spending autonomy may explain the increased focus on cybersecurity over business strategy.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f74d023e-8710-432c-b16a-8cefe463cd27", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.5, "x": 0.36, "y": 0.85 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=3,455: Cyber Champions N=172, Business Blockers N=522, Cyber Risk Takers N=885, The Vulnerable N=1,876)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "bb5b3471-917d-4323-87cf-1dbb4743f166", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0d03df18-9f73-4e30-8dd6-bac4613f9a9d", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Percentage of attacks that result in a breach", "numberRaw": "25%", "numberKind": "percent", "actionTitle": null, "calloutText": "Business Blockers outperform Cyber Risk Takers and The Vulnerable, but lag Cyber Champions across all key measures of cyber resilience.", "numberScale": null, "numberValue": 25, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-a4e9e9267506", "evidence": "Callout: 'Blockers outperform Risk Takers and Vulnerable, but lag Champions.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-a86f97d6ed84", "evidence": "Two side-by-side bar charts compare 4 segments on breach % and damage %.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-b23ca33e3aee", "evidence": "Four shades of purple/pink distinguish each segment.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Pre-attentive Attributes", "slug": "pre-attentive-attributes", "status": "active", "bestFor": null, "canonId": "019dd956-b61d-717f-a402-24ccbb4b60d8", "version": 1, "bodyDocId": null, "description": "Visual properties processed instantly: color, size, orientation, shape", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-af076557bc57", "evidence": "Business Blockers bar boxed in dotted outline to mark focus.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Small Multiples", "slug": "small-multiples", "status": "active", "bestFor": null, "canonId": "019dd956-b32d-7586-b368-baa1dd388ed4", "version": 1, "bodyDocId": null, "description": "Repeating similar charts for comparison across categories or time", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-b4c65b1e0787", "evidence": "Same bar layout repeated for two metrics side by side.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "e32c5941-0254-4f3e-93fe-77d3cc0361f6", "evidence": "The slide segments the market into four distinct groups: Cyber Champions, Business Blockers, Cyber Risk Takers, and The Vulnerable.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:54.901+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 14, "frameworkName": "audience-segmentation" } ], "arcBeats": [ { "to": 14, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 11, "name": "Problem & Complication", "beatId": "019dd95a-0680-7418-820b-e8cd5d8a7ecc", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Problem & Complication", "slug": "consultants-gambit-problem-complication", "status": "active", "canonId": "019dd9b8-064a-777f-a374-e9a8c43dedd4", "version": 1, "description": null }, "evidence": "'Why alignment matters' divider + Business Blockers lag Champions on key measures.", "position": 2, "isPrimaryArc": true, "parentBeatType": { "name": "Complication", "slug": "complication", "status": "active", "canonId": "019dd9b8-0275-7709-b2d6-4f77c3fc7579", "version": 1, "description": "The point in the narrative where the audience should feel discomfort. Required for argumentative arcs." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 15, "type": "resolution", "title": "N=522", "function": "quantify_impact", "rawType": "scenario_analysis", "block": null, "metadata": { "slideType": "scenario_analysis", "slideTypeCanon": { "name": "Scenario analysis", "slug": "scenario_analysis", "status": "active", "canonId": "019de52d-0d4d-7022-a603-242c1dd0d760", "version": 1, "description": null }, "function": "quantify_impact", "functionCanon": { "name": "Quantify impact", "slug": "quantify_impact", "status": "active", "canonId": "019de52d-1630-720d-b57d-fa7f76bebd8d", "version": 1, "description": null }, "density": "dense", "densityScore": 70, "componentCount": 7, "textChars": 992, "nDataPoints": 5, "notes": "N=522", "elementsJson": [ "headline_text", "paragraph", "bar_chart_stacked", "big_number", "callout_box", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.045+00", "seconds": 2.52, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/15", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-15", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Business Blockers could reduce costs by 48% per successful attack if they increased their performance to Cyber Champion levels, with savings of about US$294,000 per attack (Figure 7).", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:20+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-d323b6d07604", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.4, "x": 0.35, "y": 0.25 }, "kind": "chart", "text": "Waterfall chart showing reduction from $611,000 to $317,000", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Waterfall chart", "slug": "waterfall", "status": "active", "canonId": "019de52d-002e-733e-b5cf-dd3beb6692cc", "version": 1, "description": null }, "framework": null }, "subkind": "waterfall", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.045+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "753d39f4-018b-4811-b93e-6c1ada2105f6", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Reduction in cost per successful attack: 48%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:20+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-d7e633a4f11e", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "If Business Blockers add alignment to their already-robust cybersecurity foundation, they will have even stronger cyber resilience, without sacrificing business outcomes. Business Blockers could reduce costs by 48% per successful attack if they increased their performance to Cyber Champion levels, with savings of about US$294,000 per attack (Figure 7).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.045+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a86a26bb-f4a6-48f3-81c5-eb90bd58aeeb", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.45, "x": 0.35, "y": 0.65 }, "kind": "source-note", "text": "Note: We assign the same level of performance to Business Blocker companies as the Cyber Champion companies across metrics of cyber resilience such as speed of detection/remediation and proportion of significant attacks and simulate the cost outcomes. N=522", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.045+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "cb253540-2cdc-4176-ace2-294aac97f112", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.4, "x": 0.35, "y": 0.15 }, "kind": "title", "text": "Figure 7. Value at stake if Business Blockers perform like Cyber Champions", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.045+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "67d7e06e-279b-4012-87f6-6d079abe9bb3", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.045+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "be5684d2-a785-48b6-88c0-1a5f4c07b7a0", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Reduction in cost per successful attack", "numberRaw": "48%", "numberKind": "percent", "actionTitle": null, "calloutText": "Business Blockers could reduce costs by 48% per successful attack if they increased their performance to Cyber Champion levels, with savings of about US$294,000 per attack (Figure 7).", "numberScale": null, "numberValue": 48, "metricFamily": "cost_savings", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-bb3df38c04e5", "evidence": "Body lead: 'Blockers could reduce costs by 48% per attack' = the insight.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Annotation", "slug": "annotation", "status": "active", "bestFor": null, "canonId": "019dd956-b5b9-7668-bf0e-3af99823ec5c", "version": 1, "bodyDocId": null, "description": "Adding explanatory labels to highlight key data points", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-c2a5e3ac2c84", "evidence": "Big '48%' arrow with 'reduction in cost per successful attack.'", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-bf6de4e04ce0", "evidence": "Waterfall/value bridge: $611K -> $317K with two reduction components.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-c84f3f76a503", "evidence": "Solid purple bar for current vs dotted purple for to-be.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-c73234fcfcde", "evidence": "Specific dollars: $611K, $317K, $294K savings.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "2652a5e4-a0e9-4b7b-96a2-b6061e7ef0ce", "evidence": "Figure 9. Value at stake if Cyber Risk Takers perform like Cyber Champions", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:06.446091+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "019dd95a-1ca5-70bb-bb9c-a244113f0c29", "evidence": "$611K -> $317K with two stacked reduction components labelled.", "framework": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 15, "frameworkName": "Waterfall / Value Bridge" } ], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 16, "type": "appendix", "title": "The slide uses a metaphor of a car on a dam to represent risk-taking or precarious positioning.", "function": "establish_context", "rawType": "other", "block": null, "metadata": { "slideType": "other", "slideTypeCanon": { "name": "Other (fallback)", "slug": "other", "status": "active", "canonId": "019de52d-0af5-71ed-83de-d51ae245fc43", "version": 1, "description": null }, "function": "establish_context", "functionCanon": { "name": "Establish context", "slug": "establish_context", "status": "active", "canonId": "019de52d-1314-74e6-9074-d213dc0bdcdf", "version": 1, "description": null }, "density": "dense", "densityScore": 51, "componentCount": 6, "textChars": 693, "nDataPoints": 0, "notes": "The slide uses a metaphor of a car on a dam to represent risk-taking or precarious positioning.", "elementsJson": [ "headline_text", "paragraph", "photo", "footnote" ], "confidence": 0.9, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.271+00", "seconds": 2.687, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/16", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-16", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Cyber Risk Takers take a business-first approach and place less emphasis on alignment with the cybersecurity strategy. They report higher probability of meeting or exceeding their business objectives, but their business focus comes at the expense of cybersecurity success.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:21+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf4-ed7eeadf23df", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.271+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a277dadc-f1e0-47db-8e12-3f419d698dd0", "parentComponentId": null }, { "bbox": { "h": 0.73, "w": 0.67, "x": 0.28, "y": 0.16 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Illustration", "slug": "illustration", "status": "active", "canonId": "019de52c-fe76-7772-a5ac-c0b7294d7615", "version": 1, "description": null }, "framework": null }, "subkind": "illustration", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.271+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f88435dc-344d-46dc-bc9e-618159a96c56", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.35, "x": 0.05, "y": 0.38 }, "kind": "paragraph", "text": "Cyber Risk Takers take a business-first approach and place less emphasis on alignment with the cybersecurity strategy. They report higher probability of meeting or exceeding their business objectives, but their business focus comes at the expense of cybersecurity success.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.271+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "38615953-0f5d-4638-9650-0cc6759b3c06", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.3, "x": 0.05, "y": 0.28 }, "kind": "title", "text": "Cyber Risk Takers", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.271+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a8a8c15f-2662-4f25-abd8-f70407d9322b", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Subtitle", "slug": "subtitle", "status": "active", "canonId": "019de52c-fb09-739d-900c-815b0d9ac526", "version": 1, "description": null }, "framework": null }, "subkind": "subtitle", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.271+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b62168dd-8cc9-4a6d-96f1-d7ea1340000f", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "Parallel Structure", "slug": "parallel-structure", "status": "active", "bestFor": null, "canonId": "019dd956-9f34-762a-93b7-1d8e84bbd153", "version": 1, "bodyDocId": null, "description": "Using similar grammatical structure for related ideas", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Architect", "layer": "loop", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-d3cdfa4cb792", "evidence": "Reuses Blockers template (definition -> perf -> value).", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-cd590ea5fef9", "evidence": "'Cyber Risk Takers' label + definition mirrors p13.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 16, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." } ], "frameworks": [], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 17, "type": "analysis", "title": "The slide highlights a paradox where business-focused cyber strategies do not necessarily lead to better resilience.", "function": "diagnose", "rawType": "diagnosis", "block": null, "metadata": { "slideType": "diagnosis", "slideTypeCanon": { "name": "Diagnosis", "slug": "diagnosis", "status": "active", "canonId": "019de52d-0cd7-7212-898f-0464041ff8d8", "version": 1, "description": null }, "function": "diagnose", "functionCanon": { "name": "Diagnose", "slug": "diagnose", "status": "active", "canonId": "019de52d-1657-7223-acc5-7437d878c850", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 80, "componentCount": 8, "textChars": 1235, "nDataPoints": 8, "notes": "The slide highlights a paradox where business-focused cyber strategies do not necessarily lead to better resilience.", "elementsJson": [ "headline_text", "paragraph", "bar_chart_vertical", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.927+00", "seconds": 3.271, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/17", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-17", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Securing more budget doesn't translate to better cyber resilience.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:29+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-053ac8ff3341", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.28, "x": 0.35, "y": 0.2 }, "kind": "chart", "text": "Percentage of attacks that result in a breach", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.927+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0c4fd1e6-941c-4ec2-ac2c-a1b31a440858", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.28, "x": 0.65, "y": 0.2 }, "kind": "chart", "text": "Average share attacks that result in significant damage", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.927+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6294ac54-6c9e-44c9-990b-50afcae1ad07", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Percentage of attacks that result in a breach: 53%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:29+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-0a41a8c5d46a", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.28, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "Cyber Risk Takers lead in achieving business outcomes in eight business areas in our survey including cost reduction, business growth, faster time to market, gaining market share, developing new products/services, entering new markets, improved customer satisfaction and frictionless user experiences. Significantly, Cyber Risk Takers secure a higher cyber budget—and yet successful breaches are still twice as high as Business Blockers and 10 percentage points higher than The Vulnerable. Securing more budget doesn't translate to better cyber resilience. Despite being focused on business objectives, Cyber Risk Takers' performance is among the poorest when it comes to average share of successful breaches and the average share of significant attacks (Figure 8).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.927+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "92983267-3bda-41dd-a5ec-31ea378af4a6", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.5, "x": 0.35, "y": 0.62 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=3,455: Cyber Champions N=172, Business Blockers N=522, Cyber Risk Takers N=885, The Vulnerable N=1,876)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.927+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9c12dafc-cbae-46fc-b7ca-8b5f2e5e8f84", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.927+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "609c6329-2027-4683-979a-827f7d2bb809", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.3, "x": 0.35, "y": 0.15 }, "kind": "title", "text": "Figure 8. Impact of breaches on Cyber Risk Takers", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.927+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a187c8a3-f77b-4a30-8020-7c4bc8d00bda", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Percentage of attacks that result in a breach", "numberRaw": "53%", "numberKind": "percent", "actionTitle": null, "calloutText": "Securing more budget doesn't translate to better cyber resilience.", "numberScale": null, "numberValue": 53, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-d4d8f544e8ad", "evidence": "Callout: 'Securing more budget doesn't translate to better cyber resilience.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-dbeef1c3e1ea", "evidence": "Comparison bars for Risk Takers across the 4-segment cohort.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-df9d4912b97e", "evidence": "Same segment color coding.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Storytelling: audience calibration", "slug": "audience", "status": "active", "bestFor": null, "canonId": "019df269-23ea-723a-87c0-af1d78d702d2", "version": 1, "bodyDocId": "019df269-23c5-72ec-8b94-78fc1da7b656", "description": "The same thesis, written for four different audiences, produces four", "familyLabel": "narrative-block", "categoryName": "Narrative & Transformation", "categorySlug": "narrative-transformation" }, "agent": "storyteller", "layer": "slide", "agents": [ "storyteller" ], "matchId": "74a14107-1ef1-48ea-9af9-d286765e9fa1", "evidence": "Our survey shows that 87% of banks are prioritizing investment in embedded payments solutions, while 65% are focusing on value-added services.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:28.319002+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 17, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 18, "type": "resolution", "title": "The chart is a waterfall-style comparison showing the breakdown of cost reduction components.", "function": "quantify_impact", "rawType": "impact_sizing", "block": null, "metadata": { "slideType": "impact_sizing", "slideTypeCanon": { "name": "Impact sizing", "slug": "impact_sizing", "status": "active", "canonId": "019de52d-0d26-773b-aeda-2d1930f5636d", "version": 1, "description": null }, "function": "quantify_impact", "functionCanon": { "name": "Quantify impact", "slug": "quantify_impact", "status": "active", "canonId": "019de52d-1630-720d-b57d-fa7f76bebd8d", "version": 1, "description": null }, "density": "dense", "densityScore": 65, "componentCount": 6, "textChars": 1304, "nDataPoints": 5, "notes": "The chart is a waterfall-style comparison showing the breakdown of cost reduction components.", "elementsJson": [ "headline_text", "paragraph", "bar_chart_stacked", "big_number", "callout_box", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.109+00", "seconds": 2.409, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/18", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-18", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Cyber Risk Takers could reduce costs by 65% per successful attack if they increased their performance to Cyber Champion levels, with savings of about US$226,000 per attack (Figure 9).", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:01+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-5906f9f48937", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.55, "x": 0.35, "y": 0.15 }, "kind": "chart", "text": "Figure 9. Value at stake if Cyber Risk Takers perform like Cyber Champions", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Waterfall chart", "slug": "waterfall", "status": "active", "canonId": "019de52d-002e-733e-b5cf-dd3beb6692cc", "version": 1, "description": null }, "framework": null }, "subkind": "waterfall", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.109+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "37b1e6d0-cd1d-4c3c-aa42-0462917961ce", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Reduction in cost per successful attack: 65%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:01+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-5c7baa947efd", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.28, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "And they have a resource allocation problem—they lack visibility, unclear metrics delay investment decisions and they demonstrate a poor allocation of funds. With fewer CISOs authorizing the security budget it may be that these Cyber Risk Takers are cash rich but expertise poor when it comes to how to spend their cybersecurity budgets. While a focus on alignment alone may enable potential for meaningful business benefits, without a foundation for cyber resilience companies will be at greater risk and have higher costs of cybersecurity. Cyber Risk Takers could reduce costs by 65% per successful attack if they increased their performance to Cyber Champion levels, with savings of about US$226,000 per attack (Figure 9).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.109+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2513053e-f98c-41a4-9e03-6890ade3101c", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.55, "x": 0.35, "y": 0.64 }, "kind": "source-note", "text": "Note: We assign the same level of performance to Cyber Risk Taker companies as the Cyber Champion companies across metrics of cyber resilience such as speed of detection/remediation and proportion of significant attacks and simulate the cost outcomes. N=885", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.109+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6e8f7983-cfb1-4e2d-93d8-1e0e3282ca7a", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.109+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a21308c6-c620-43d3-9668-dc7ad14fd0e6", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Reduction in cost per successful attack", "numberRaw": "65%", "numberKind": "percent", "actionTitle": null, "calloutText": "Cyber Risk Takers could reduce costs by 65% per successful attack if they increased their performance to Cyber Champion levels, with savings of about US$226,000 per attack (Figure 9).", "numberScale": null, "numberValue": 65, "metricFamily": "cost_savings", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-e3b9c8042d26", "evidence": "Body: 'Risk Takers could reduce costs by 65% per attack.'", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Annotation", "slug": "annotation", "status": "active", "bestFor": null, "canonId": "019dd956-b5b9-7668-bf0e-3af99823ec5c", "version": 1, "bodyDocId": null, "description": "Adding explanatory labels to highlight key data points", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-edae172bb88e", "evidence": "65% reduction call-out matches p15 pattern.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-e7ef97553b41", "evidence": "Same bridge format as p15 for Risk Takers segment.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be36-e98d2e0ccd98", "evidence": "$226K savings per attack named explicitly.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Waterfall chart", "slug": "waterfall-chart", "status": "active", "bestFor": null, "canonId": "e2799da3-725f-44a9-a093-570f1f388e64", "version": 1, "bodyDocId": null, "description": null, "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3726e275-03f2-4fbd-ab78-790850dbc751", "evidence": "chart/waterfall: Figure 9. Value at stake if Cyber Risk Takers perform like Cyber Champions", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-17 03:52:28.403244+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "019dd95a-1ca5-70bb-bb9c-a579dae84147", "evidence": "Same bridge layout as p15 applied to Cyber Risk Takers segment.", "framework": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 18, "frameworkName": "Waterfall / Value Bridge" } ], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 19, "type": "setup", "title": "The slide uses a metaphor of a road junction to represent alignment.", "function": "summarize", "rawType": "key_messages", "block": null, "metadata": { "slideType": "key_messages", "slideTypeCanon": { "name": "Key messages", "slug": "key_messages", "status": "active", "canonId": "019de52d-0712-703f-89f5-bda6688faf3f", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "dense", "densityScore": 63, "componentCount": 7, "textChars": 707, "nDataPoints": 1, "notes": "The slide uses a metaphor of a road junction to represent alignment.", "elementsJson": [ "headline_text", "paragraph", "photo", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.233+00", "seconds": 2.41, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/19", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-19", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Cyber Champions are the cream of the crop. Like Business Blockers, Champions are among the top 30% in at least three of the four cyber resilience criteria. What sets them apart is their close alignment to the business strategy.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:48+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-234dd5d707f8", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.4, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.233+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "973f3601-e9ad-47c7-bd00-60867b0893ad", "parentComponentId": null }, { "bbox": { "h": 0.68, "w": 0.67, "x": 0.28, "y": 0.16 }, "kind": "image", "text": "Aerial view of a road junction", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.233+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "c3d21616-8508-4610-a5c7-298cbaa6d371", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "share of cyber resilience criteria where Champions rank in top tier: top 30%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:01:48+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-268231cb5539", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.35, "x": 0.05, "y": 0.38 }, "kind": "paragraph", "text": "Cyber Champions are the cream of the crop. Like Business Blockers, Champions are among the top 30% in at least three of the four cyber resilience criteria. What sets them apart is their close alignment to the business strategy.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.233+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d9ac99fa-e629-4a7c-a057-068233d4a0f5", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.15, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.233+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8543f2c5-a1bc-4dd0-83cd-16b4802e65d1", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.35, "x": 0.05, "y": 0.28 }, "kind": "title", "text": "Cyber Champions", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.233+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d2ddcfef-bc61-49af-b02d-a6f948748c17", "parentComponentId": null } ], "metrics": [ { "metricRaw": "share of cyber resilience criteria where Champions rank in top tier", "numberRaw": "top 30%", "numberKind": "percent", "actionTitle": null, "calloutText": "Cyber Champions are the cream of the crop. Like Business Blockers, Champions are among the top 30% in at least three of the four cyber resilience criteria. What sets them apart is their close alignment to the business strategy.", "numberScale": null, "numberValue": 30, "metricFamily": "share_penetration", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-f1d3133f63f3", "evidence": "'Cyber Champions' divider with 'cream of the crop' positioning.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-f7308f44601b", "evidence": "Champion segment color carried through.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 19, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 20, "type": "analysis", "title": "The slide uses bar charts to illustrate the performance gap between 'Cyber Champions' and other segments.", "function": "analyze_data", "rawType": "data_table", "block": null, "metadata": { "slideType": "data_table", "slideTypeCanon": { "name": "Data table", "slug": "data_table", "status": "active", "canonId": "019de52d-0bbd-71b9-9918-417f904abbf8", "version": 1, "description": null }, "function": "analyze_data", "functionCanon": { "name": "Analyze data", "slug": "analyze_data", "status": "active", "canonId": "019de52d-1590-7413-8c82-cc218cff40b4", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 86, "componentCount": 9, "textChars": 1327, "nDataPoints": 8, "notes": "The slide uses bar charts to illustrate the performance gap between 'Cyber Champions' and other segments.", "elementsJson": [ "headline_text", "paragraph", "bar_chart_vertical", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.239+00", "seconds": 3.385, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/20", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-20", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "The number of successful breaches experienced by Cyber Champions is 8 percentage points lower than Business Blockers and 36 percentage points lower than Cyber Risk Takers and they experience the fewest significant attacks (Figure 10).", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-3c2ca14e43a1", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.6, "x": 0.35, "y": 0.15 }, "kind": "chart", "text": "Figure 10. Impact of breaches on Cyber Champions", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "8fa766bd-7485-4734-a44e-865f21197cc4", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Percentage of attacks that result in a breach: 17%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-4056996b8da5", "parentComponentId": null }, { "bbox": { "h": 0.07, "w": 0.3, "x": 0.05, "y": 0.28 }, "kind": "paragraph", "text": "Cyber Champions have a speedier response to detection and remediation—a day extra of being fully operational can make all the difference to the bottom line.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3617aa45-8aa3-4834-aa74-befe0f4a4282", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.3, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "The number of successful breaches experienced by Cyber Champions is 8 percentage points lower than Business Blockers and 36 percentage points lower than Cyber Risk Takers and they experience the fewest significant attacks (Figure 10).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9875a201-388d-4d86-b125-e2e3af52c66a", "parentComponentId": null }, { "bbox": { "h": 0.07, "w": 0.3, "x": 0.05, "y": 0.38 }, "kind": "paragraph", "text": "Cyber Champions are better able to protect themselves from loss of data—about 4% of Cyber Champions lose more than 500,000 records—6.5X less than Cyber Risk Takers at 27%.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b6afbd24-4a50-4b08-b50f-43017ba97e49", "parentComponentId": null }, { "bbox": { "h": 0.07, "w": 0.3, "x": 0.05, "y": 0.48 }, "kind": "paragraph", "text": "Some of the Cyber Champions' success in aligning with the business could be as a result of the fact that they have a higher share of business unit leads responsible for cybersecurity—nearly twice (1.9X) that of Cyber Risk Takers.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "d74844c8-42c1-4214-b9c8-9876b962e213", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.5, "x": 0.35, "y": 0.58 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=3,455: Cyber Champions N=172, Business Blockers N=522, Cyber Risk Takers N=885, The Vulnerable N=1,876)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "11b6d868-be00-483d-9483-d17b3bec5e05", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.239+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b3db245d-8c13-4369-a67a-dd0cee939c38", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Percentage of attacks that result in a breach", "numberRaw": "17%", "numberKind": "percent", "actionTitle": null, "calloutText": "The number of successful breaches experienced by Cyber Champions is 8 percentage points lower than Business Blockers and 36 percentage points lower than Cyber Risk Takers and they experience the fewest significant attacks (Figure 10).", "numberScale": null, "numberValue": 17, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be36-fb99a6ff08cd", "evidence": "Callout: Champions experience 8 pp fewer breaches than Blockers, 36 pp fewer than Risk Takers.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be36-fcf8eff08a00", "evidence": "Bar comparison of breach incidence across segments.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Color Strategy", "slug": "color-strategy", "status": "active", "bestFor": null, "canonId": "019dd956-b202-77cf-8a6e-f445b08c0fd3", "version": 1, "bodyDocId": null, "description": "Using color for emphasis, categories, sentiment, and hierarchy", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-00448b20caef", "evidence": "Champions bar emphasized.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 65, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 20, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 21, "type": "analysis", "title": "The slide displays two donut charts side-by-side, one for countries and one for industries.", "function": "analyze_data", "rawType": "data_table", "block": null, "metadata": { "slideType": "data_table", "slideTypeCanon": { "name": "Data table", "slug": "data_table", "status": "active", "canonId": "019de52d-0bbd-71b9-9918-417f904abbf8", "version": 1, "description": null }, "function": "analyze_data", "functionCanon": { "name": "Analyze data", "slug": "analyze_data", "status": "active", "canonId": "019de52d-1590-7413-8c82-cc218cff40b4", "version": 1, "description": null }, "density": "dense", "densityScore": 55, "componentCount": 6, "textChars": 610, "nDataPoints": 12, "notes": "The slide displays two donut charts side-by-side, one for countries and one for industries.", "elementsJson": [ "headline_text", "paragraph", "donut_chart", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.267+00", "seconds": 2.41, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/21", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-21", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Top countries and industries represented in Cyber Champions include the United States, Japan, United Kingdom and Germany and insurance, telecommunications, high tech and retail respectively (Figure 11).", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:23+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-75c584515b2d", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.6, "x": 0.35, "y": 0.15 }, "kind": "chart", "text": "Figure 11. Cyber Champions—top countries and industries represented", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Donut chart", "slug": "donut", "status": "active", "canonId": "019de52d-0006-752c-9528-0fef476b8004", "version": 1, "description": null }, "framework": null }, "subkind": "donut", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.267+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1434b4a0-262c-4b32-9f9b-6caf9cc3b88d", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Cyber Champions share by country: 24%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:23+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-7a8ea254c223", "parentComponentId": null }, { "bbox": { "h": 0.1, "w": 0.25, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "Top countries and industries represented in Cyber Champions include the United States, Japan, United Kingdom and Germany and insurance, telecommunications, high tech and retail respectively (Figure 11).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.267+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ff87e1de-532c-4688-a8fe-6d59dba3d94e", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.3, "x": 0.35, "y": 0.6 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, Cyber Champions (N=172)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.267+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1ccc98bc-8b42-41b6-894f-d272e49c03ac", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Why alignment matters", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.267+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "b29104a8-ab61-437a-8fba-5c809223166a", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Cyber Champions share by country", "numberRaw": "24%", "numberKind": "percent", "actionTitle": null, "calloutText": "Top countries and industries represented in Cyber Champions include the United States, Japan, United Kingdom and Germany and insurance, telecommunications, high tech and retail respectively (Figure 11).", "numberScale": null, "numberValue": 24, "metricFamily": "share_penetration", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-0589dc911842", "evidence": "Callout names top countries and industries within Champions.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Chart Selection Guide", "slug": "chart-selection-guide", "status": "active", "bestFor": null, "canonId": "019dd956-b1a0-700b-ba17-0e16c4d5bcae", "version": 1, "bodyDocId": null, "description": "Choosing the right chart type for your data and message", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-0848fe79b3af", "evidence": "Segmentation visual showing Champions composition.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 21, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 21, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 15, "name": "Evidence & Proof", "beatId": "019dd95a-0680-7418-820b-effcbed15f5b", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Solution & Approach", "slug": "consultants-gambit-solution-approach", "status": "active", "canonId": "019dd9b8-071c-7161-9184-580fdac7a4f9", "version": 1, "description": null }, "evidence": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data.", "position": 3, "isPrimaryArc": true, "parentBeatType": { "name": "Turn", "slug": "turn", "status": "active", "canonId": "019dd9b8-0396-702b-ac2f-9901f8dd8b54", "version": 1, "description": "The pivot — solution proposed, catalyst introduced, decision made. Common (15/20 arcs) but not universal: Triple-take, AIDA, PAS, Voyage-return and Pixar substitute it with a strong reflection or development beat." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 21, "from": 12, "loop": { "name": "34_segmentation_split", "slug": "34-segmentation-split", "status": "active", "bestFor": "Customer analysis, market research, resource allocation", "canonId": "019dd956-7398-77a8-9a5f-2e4d39589f42", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Aggregate View -> Segment A Behavior -> Segment B Behavior -> The Insight in the Difference", "description": "Divide a whole into meaningful segments to reveal hidden patterns", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1bdee215dcb3", "evidence": "Aggregate table p12 then parallel intro+performance+value-at-stake blocks for Blockers, Risk Takers, Champions.", "position": 3, "objective": "Walk segment by segment to expose performance differences and value at stake", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 22, "type": "setup", "title": "The slide uses a metaphor of a fork in the road to represent strategic choices.", "function": "summarize", "rawType": "key_messages", "block": null, "metadata": { "slideType": "key_messages", "slideTypeCanon": { "name": "Key messages", "slug": "key_messages", "status": "active", "canonId": "019de52d-0712-703f-89f5-bda6688faf3f", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "sparse", "densityScore": 20, "componentCount": 4, "textChars": 276, "nDataPoints": 0, "notes": "The slide uses a metaphor of a fork in the road to represent strategic choices.", "elementsJson": [ "headline_text", "icon_grid", "photo", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:55.608+00", "seconds": 6.571, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/22", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-22", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.03, "w": 0.4, "x": 0.05, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:55.608+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "78dd87af-9d9d-492c-bada-12c1abfde043", "parentComponentId": null }, { "bbox": { "h": 0.75, "w": 0.44, "x": 0.51, "y": 0.09 }, "kind": "image", "text": "Aerial view of a fork in a road", "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:55.608+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "e1dee1d3-c8c1-4db8-bce0-f361a4042c95", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.4, "x": 0.05, "y": 0.55 }, "kind": "list", "text": "Give CISOs a seat at the top table; Be threat-centric and business aligned; Get the most out of secure cloud", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:55.608+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "ae19d6d6-7ae5-454a-9b9c-8ed77b7fb579", "parentComponentId": null }, { "bbox": { "h": 0.3, "w": 0.35, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "How to be a Cyber Champion", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:55.608+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "78bb2f02-1ffb-4157-88dc-c97bac71931a", "parentComponentId": null } ], "metrics": [], "tools": [ { "tool": { "name": "The Rule of Three", "slug": "the-rule-of-three", "status": "active", "bestFor": null, "canonId": "019dd956-8962-75cf-b4f8-9394501a6f33", "version": 1, "bodyDocId": null, "description": "Ideas presented in threes are more memorable and satisfying", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "block", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-22d886c3663e", "evidence": "Exactly 3 pillars (CISO seat, threat-centric, secure cloud) anchor next 3 slides.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Three Pillars", "slug": "three-pillars", "status": "active", "bestFor": null, "canonId": "019dd956-81ef-7455-a365-b234d95a6bbb", "version": 1, "bodyDocId": null, "description": "Three major supporting arguments that are MECE and address key concerns", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Architect", "layer": "block", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-2635447d94df", "evidence": "Block opens with three icon-labeled pillars elaborated p23-25.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 90, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-0dcd60c69d7b", "evidence": "Title 'How to be a Cyber Champion' states the so-what for the recommendation block.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Metaphor & Analogy", "slug": "metaphor-analogy", "status": "active", "bestFor": null, "canonId": "019dd956-adea-7729-bca1-70810d6238a9", "version": 1, "bodyDocId": null, "description": "Making abstract concepts concrete through familiar comparisons", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-1f74e9d48132", "evidence": "Aerial crossroads image as visual metaphor for the strategic choice.", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 72, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Picture Superiority Effect", "slug": "picture-superiority-effect", "status": "active", "bestFor": null, "canonId": "019dd956-c201-7014-bb58-3e85e3e11dfd", "version": 1, "bodyDocId": null, "description": "Pictures remembered 6x better than words - prioritize visuals over text", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-18424029ba22", "evidence": "Crossroads photo on right anchors the 'choose your path' metaphor.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Typography Hierarchy", "slug": "typography-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-ba98-77ab-9513-ff2344da8bc7", "version": 1, "bodyDocId": null, "description": "Using font size, weight, and style to create reading order", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-14da374de7aa", "evidence": "Massive white headline dominates; pillar labels secondary.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Visual Hierarchy", "slug": "visual-hierarchy", "status": "active", "bestFor": null, "canonId": "019dd956-b2ca-706b-937f-e52441086fd7", "version": 1, "bodyDocId": null, "description": "Order of perception through Size > Color > Position > Weight > Space", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-10890bddc098", "evidence": "Three icons + labels arranged equal-weight under giant headline.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 85, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 22, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 26, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 22, "name": "Solution & Approach", "beatId": "019dd95a-0680-7418-820b-f0b30fd9e7ba", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Evidence & Proof", "slug": "consultants-gambit-evidence-proof", "status": "active", "canonId": "019dd9b8-07b1-7688-8e1e-7637fec3802a", "version": 1, "description": null }, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "isPrimaryArc": true, "parentBeatType": { "name": "Evidence", "slug": "evidence", "status": "active", "canonId": "019dd9b8-03f9-772a-b84a-4f07b415b77a", "version": 1, "description": "A dedicated proof beat exists in only ~4 arcs (Gambit, Sequoia, AIDA, Monroes). Other arcs embed evidence inline within development." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 25, "from": 22, "loop": { "name": "09_precedent", "slug": "09-precedent", "status": "active", "bestFor": "Risk mitigation, strategy validation, building confidence in new approaches", "canonId": "019dd956-695f-7615-8f82-39d919918314", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Precedent Case -> What Happened -> The Parallel -> Applied Learning", "description": "Use historical or external examples to validate your approach", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1fd822f2171a", "evidence": "Three pillars on p22 each backed on p23-25 by a stat showing what Champions do differently.", "position": 4, "objective": "Tell readers to replicate what Cyber Champions already do", "confidence": 82, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 23, "type": "resolution", "title": "The slide uses a quote from a CISO to reinforce the strategic importance of cybersecurity alignment.", "function": "summarize", "rawType": "key_takeaways", "block": null, "metadata": { "slideType": "key_takeaways", "slideTypeCanon": { "name": "Key takeaways", "slug": "key_takeaways", "status": "active", "canonId": "019de52d-06e7-7674-a891-9f7de3b11b6d", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 89, "componentCount": 10, "textChars": 1345, "nDataPoints": 8, "notes": "The slide uses a quote from a CISO to reinforce the strategic importance of cybersecurity alignment.", "elementsJson": [ "action_title", "subtitle_text", "paragraph", "bar_chart_grouped", "quote_block", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.63+00", "seconds": 3.453, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/23", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-23", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Cyber Champions have more autonomy: only 19% have their budget authorized by the CEO or board", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:32+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-abc51f6e8f00", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.3, "x": 0.65, "y": 0.27 }, "kind": "chart", "text": "Figure 12. Cyber Champions have more autonomy: only 19% have their budget authorized by the CEO or board", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Grouped bar chart", "slug": "bar-grouped", "status": "active", "canonId": "019de52c-ff3b-751e-a8ff-f21ff11097b1", "version": 1, "description": null }, "framework": null }, "subkind": "bar-grouped", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a61294eb-5464-42c0-bbbc-a13403651605", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Share with budget authorized by CEO or Board: 19%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:32+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-b2ca102e55ce", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.05, "y": 0.27 }, "kind": "paragraph", "text": "CISOs must move away from security-focused silos and collaborate with the right executives in the organization to understand business risks and priorities.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "25985c6b-f17b-49b8-bf91-2f6efd20e818", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.05, "y": 0.48 }, "kind": "paragraph", "text": "We found that Cyber Champions set themselves apart in terms of their reporting structures. Around 70% of the group report to the CEO and Board.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "779ace1d-4a80-4d45-986c-b4b3ea02fc3e", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.35, "y": 0.27 }, "kind": "paragraph", "text": "When it comes to budget authorization, only 19% of Cyber Champions have their budgets authorized by the CEO or Board, compared to 23% for Business Blockers and 39% for Cyber Risk Takers.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "c8709a19-a954-443f-9dc9-fd30feda60ea", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.35, "y": 0.52 }, "kind": "quote", "text": "The business is heavily aligned with the CISO: The reason is very simple. Cyber is one of the top three priorities communicated by our chairperson and by top management... but if you don't have the okay from cyber, the product simply doesn't move on.", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": null, "subkind": { "name": "Testimonial", "slug": "testimonial", "status": "active", "canonId": "019de52c-fc21-71b6-9ac3-8266a64945e8", "version": 1, "description": null }, "framework": null }, "subkind": "testimonial", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3fe651de-508e-4467-b8e0-34a3ecca1af7", "parentComponentId": null }, { "bbox": null, "kind": "quote", "text": "\"The business is heavily aligned with the CISO: The reason is very simple. Cyber is one of the top three priorities communicated by our chairperson and by top management… but if you don't have the okay from cyber, the product simply doesn't move on.\" — CISO, Regional US Bank", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": { "name": "Authority citation", "slug": "authority-citation", "status": "active", "bestFor": null, "canonId": "019dd9e1-49ae-7557-89ad-3fca70469b45", "version": 1, "bodyDocId": null, "description": "Quoting an authority figure, study, or precedent to lend weight.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:02:32+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-afb99c9603d4", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.3, "x": 0.65, "y": 0.72 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "6fa470d4-2579-498e-be64-a6fcd352acb7", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.5, "x": 0.11, "y": 0.16 }, "kind": "title", "text": "Give CISOs a seat at the top table", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.63+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a1589fd9-1da5-4ee8-a0cd-173242345517", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Share with budget authorized by CEO or Board", "numberRaw": "19%", "numberKind": "percent", "actionTitle": "Give CISOs a seat at the top table", "calloutText": "Cyber Champions have more autonomy: only 19% have their budget authorized by the CEO or board", "numberScale": null, "numberValue": 19, "metricFamily": "market_size", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-2a602cf6c7d3", "evidence": "Title 'Give CISOs a seat at the top table' is a directive insight.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 23, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-2da04d53951d", "evidence": "Only 19% of Champions have budget authorized by CEO/board.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 23, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 26, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 22, "name": "Solution & Approach", "beatId": "019dd95a-0680-7418-820b-f0b30fd9e7ba", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Evidence & Proof", "slug": "consultants-gambit-evidence-proof", "status": "active", "canonId": "019dd9b8-07b1-7688-8e1e-7637fec3802a", "version": 1, "description": null }, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "isPrimaryArc": true, "parentBeatType": { "name": "Evidence", "slug": "evidence", "status": "active", "canonId": "019dd9b8-03f9-772a-b84a-4f07b415b77a", "version": 1, "description": "A dedicated proof beat exists in only ~4 arcs (Gambit, Sequoia, AIDA, Monroes). Other arcs embed evidence inline within development." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 25, "from": 22, "loop": { "name": "09_precedent", "slug": "09-precedent", "status": "active", "bestFor": "Risk mitigation, strategy validation, building confidence in new approaches", "canonId": "019dd956-695f-7615-8f82-39d919918314", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Precedent Case -> What Happened -> The Parallel -> Applied Learning", "description": "Use historical or external examples to validate your approach", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1fd822f2171a", "evidence": "Three pillars on p22 each backed on p23-25 by a stat showing what Champions do differently.", "position": 4, "objective": "Tell readers to replicate what Cyber Champions already do", "confidence": 82, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 24, "type": "resolution", "title": "The slide uses a quote from a CISO to reinforce the importance of aligning security metrics with business processes.", "function": "summarize", "rawType": "key_takeaways", "block": null, "metadata": { "slideType": "key_takeaways", "slideTypeCanon": { "name": "Key takeaways", "slug": "key_takeaways", "status": "active", "canonId": "019de52d-06e7-7674-a891-9f7de3b11b6d", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 89, "componentCount": 10, "textChars": 1537, "nDataPoints": 4, "notes": "The slide uses a quote from a CISO to reinforce the importance of aligning security metrics with business processes.", "elementsJson": [ "action_title", "headline_text", "paragraph", "bar_chart_vertical", "quote_block", "callout_box", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.818+00", "seconds": 3.581, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/24", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-24", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "We found nearly 90% of Cyber Champions measure the maturity of their cybersecurity program at least annually or more frequently, 18% more than the Business Blockers (Figure 13).", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-ee3384008ffb", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.3, "x": 0.65, "y": 0.26 }, "kind": "chart", "text": "Figure 13. Cyber Champions measure cybersecurity maturity frequently", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "316e21b1-2614-4bca-a766-292b33b07864", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Share measuring cybersecurity maturity at least annually: 87%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-f6fe0d897931", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.28, "x": 0.05, "y": 0.26 }, "kind": "paragraph", "text": "CISOs only have to reflect on the 160% year-on-year increase in ransomware events in 2020 to recognize that cyber attacks are prompting a “prevention is better than cure” approach. Given remediation can be 30X the cost of prevention...", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3a368f48-4572-4d36-a212-27cc9695e91f", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.35, "y": 0.26 }, "kind": "paragraph", "text": "We found nearly 90% of Cyber Champions measure the maturity of their cybersecurity program at least annually or more frequently, 18% more than the Business Blockers (Figure 13). This indicates that Cyber Champions clearly understand the risks...", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4d3b0140-6785-4a05-9289-fef394dbea53", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.35, "y": 0.58 }, "kind": "quote", "text": "We track data in four areas: cybersecurity effectiveness, the company’s cyber culture, cybersecurity readiness and cybersecurity resilience. We monitor how well we align our plans with core processes and what’s going on in the business.", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": null, "subkind": { "name": "Testimonial", "slug": "testimonial", "status": "active", "canonId": "019de52c-fc21-71b6-9ac3-8266a64945e8", "version": 1, "description": null }, "framework": null }, "subkind": "testimonial", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "58197c43-72c1-4441-ad65-fc90743cdea4", "parentComponentId": null }, { "bbox": null, "kind": "quote", "text": "\"We track data in four areas: cybersecurity effectiveness, the company's cyber culture, cybersecurity readiness and cybersecurity resilience. We monitor how well we align our plans with core processes and what's going on in the business.\" — CISO, Large Mining Company", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": { "name": "Authority citation", "slug": "authority-citation", "status": "active", "bestFor": null, "canonId": "019dd9e1-49ae-7557-89ad-3fca70469b45", "version": 1, "bodyDocId": null, "description": "Quoting an authority figure, study, or precedent to lend weight.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-f1a45957853b", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.3, "x": 0.65, "y": 0.65 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=3,455: Cyber Champions N=172, Business Blockers N=522, Cyber Risk Takers N=885, The Vulnerable N=1,876)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "fd10f971-c473-44ed-9021-256390ca3105", "parentComponentId": null }, { "bbox": { "h": 0.06, "w": 0.79, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Be threat-centric and business aligned", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3b87ddff-39f1-406d-9e82-a6d2820aa6d9", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.23, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "How to be a Cyber Champion", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Subtitle", "slug": "subtitle", "status": "active", "canonId": "019de52c-fb09-739d-900c-815b0d9ac526", "version": 1, "description": null }, "framework": null }, "subkind": "subtitle", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.818+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7278c98d-3d3e-40e8-914e-f014cc72bd10", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Share measuring cybersecurity maturity at least annually", "numberRaw": "87%", "numberKind": "percent", "actionTitle": "Be threat-centric and business aligned", "calloutText": "We found nearly 90% of Cyber Champions measure the maturity of their cybersecurity program at least annually or more frequently, 18% more than the Business Blockers (Figure 13).", "numberScale": null, "numberValue": 87, "metricFamily": "share_penetration", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-32ebdf8f4ec1", "evidence": "Title 'Be threat-centric and business aligned' is directive.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-341dae551a9f", "evidence": "87% of Champions measure maturity at least annually, 18 pp more than Blockers.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "019dd95a-1ca5-70bb-bb9c-aad5926282be", "evidence": "Slide hinges on Champions measuring 'maturity of their cybersecurity program' annually.", "framework": null, "confidence": 60, "extraction": { "at": "2026-04-29 13:07:34.826634+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 24, "frameworkName": "Maturity Model" } ], "arcBeats": [ { "to": 26, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 22, "name": "Solution & Approach", "beatId": "019dd95a-0680-7418-820b-f0b30fd9e7ba", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Evidence & Proof", "slug": "consultants-gambit-evidence-proof", "status": "active", "canonId": "019dd9b8-07b1-7688-8e1e-7637fec3802a", "version": 1, "description": null }, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "isPrimaryArc": true, "parentBeatType": { "name": "Evidence", "slug": "evidence", "status": "active", "canonId": "019dd9b8-03f9-772a-b84a-4f07b415b77a", "version": 1, "description": "A dedicated proof beat exists in only ~4 arcs (Gambit, Sequoia, AIDA, Monroes). Other arcs embed evidence inline within development." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 25, "from": 22, "loop": { "name": "09_precedent", "slug": "09-precedent", "status": "active", "bestFor": "Risk mitigation, strategy validation, building confidence in new approaches", "canonId": "019dd956-695f-7615-8f82-39d919918314", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Precedent Case -> What Happened -> The Parallel -> Applied Learning", "description": "Use historical or external examples to validate your approach", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1fd822f2171a", "evidence": "Three pillars on p22 each backed on p23-25 by a stat showing what Champions do differently.", "position": 4, "objective": "Tell readers to replicate what Cyber Champions already do", "confidence": 82, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 25, "type": "resolution", "title": "The slide uses a bar chart to compare security prioritization across four segments of cybersecurity maturity.", "function": "quantify_impact", "rawType": "key_takeaways", "block": null, "metadata": { "slideType": "key_takeaways", "slideTypeCanon": { "name": "Key takeaways", "slug": "key_takeaways", "status": "active", "canonId": "019de52d-06e7-7674-a891-9f7de3b11b6d", "version": 1, "description": null }, "function": "quantify_impact", "functionCanon": { "name": "Quantify impact", "slug": "quantify_impact", "status": "active", "canonId": "019de52d-1630-720d-b57d-fa7f76bebd8d", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 77, "componentCount": 8, "textChars": 1024, "nDataPoints": 4, "notes": "The slide uses a bar chart to compare security prioritization across four segments of cybersecurity maturity.", "elementsJson": [ "headline_text", "action_title", "paragraph", "bar_chart_vertical", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.624+00", "seconds": 2.991, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/25", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-25", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Most Cyber Champions (83%) say that security is a major consideration when moving operations to the cloud versus 70% of the overall sample.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:04+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-10a586d284a2", "parentComponentId": null }, { "bbox": { "h": 0.4, "w": 0.3, "x": 0.65, "y": 0.25 }, "kind": "chart", "text": "Figure 14. Cyber Champions move to the cloud with security in mind", "attrs": null, "canon": { "kind": { "name": "Chart", "slug": "chart", "status": "active", "canonId": "019de52c-f9a0-76ef-adc6-0b859109d1f8", "version": 1, "description": "Quantitative chart." }, "tool": null, "subkind": { "name": "Vertical bar chart", "slug": "bar-vertical", "status": "active", "canonId": "019de52c-fe9d-70f2-b3b7-a9ae294f5917", "version": 1, "description": null }, "framework": null }, "subkind": "bar-vertical", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0051840c-5f34-444f-994e-bde3a477a061", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Security is a major consideration when moving to the cloud: 83%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:04+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-16b5f895858c", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.05, "y": 0.25 }, "kind": "paragraph", "text": "Security should be embedded consistently in the cloud. Too often, it is added at the end of the cloud-first journey and can delay business outcomes—or result in having to do the costly work all over again.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1388eea2-457c-4ba1-92d4-9e13b08fb283", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.28, "x": 0.35, "y": 0.25 }, "kind": "paragraph", "text": "Most Cyber Champions (83%) say that security is a major consideration when moving operations to the cloud versus 70% of the overall sample. Cyber Champions are better at baking security into their cloud initiatives—they don't see security involvement as a significant barrier to cloud discussions (Figure 14).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9a030e62-b13c-4a7f-8a62-329f3032b8fb", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.3, "x": 0.65, "y": 0.68 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=3,455: Cyber Champions N=172, Business Blockers N=522, Cyber Risk Takers N=885, The Vulnerable N=1,876)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4e3fa351-c5f3-4039-be8e-29ef289c5804", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.23, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "How to be a Cyber Champion", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1142d950-bd49-4398-821b-f2a3f357b623", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.6, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Get the most out of secure cloud", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.624+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2796f0ec-7ad8-4fff-bd77-33c316b455b5", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Security is a major consideration when moving to the cloud", "numberRaw": "83%", "numberKind": "percent", "actionTitle": "Get the most out of secure cloud", "calloutText": "Most Cyber Champions (83%) say that security is a major consideration when moving operations to the cloud versus 70% of the overall sample.", "numberScale": null, "numberValue": 83, "metricFamily": "rate_catchall", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-3a6cd4334c49", "evidence": "Title 'Get the most out of secure cloud' is the directive.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 92, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 25, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-3c5df41bb5e9", "evidence": "83% of Champions vs 70% overall make security a major cloud consideration.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 25, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 26, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 22, "name": "Solution & Approach", "beatId": "019dd95a-0680-7418-820b-f0b30fd9e7ba", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Evidence & Proof", "slug": "consultants-gambit-evidence-proof", "status": "active", "canonId": "019dd9b8-07b1-7688-8e1e-7637fec3802a", "version": 1, "description": null }, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "isPrimaryArc": true, "parentBeatType": { "name": "Evidence", "slug": "evidence", "status": "active", "canonId": "019dd9b8-03f9-772a-b84a-4f07b415b77a", "version": 1, "description": "A dedicated proof beat exists in only ~4 arcs (Gambit, Sequoia, AIDA, Monroes). Other arcs embed evidence inline within development." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 25, "from": 22, "loop": { "name": "09_precedent", "slug": "09-precedent", "status": "active", "bestFor": "Risk mitigation, strategy validation, building confidence in new approaches", "canonId": "019dd956-695f-7615-8f82-39d919918314", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "The Precedent Case -> What Happened -> The Parallel -> Applied Learning", "description": "Use historical or external examples to validate your approach", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-1fd822f2171a", "evidence": "Three pillars on p22 each backed on p23-25 by a stat showing what Champions do differently.", "position": 4, "objective": "Tell readers to replicate what Cyber Champions already do", "confidence": 82, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 26, "type": "setup", "title": "The slide uses a table to contrast survey responses and reported metrics between two distinct executive groups.", "function": "compare_peers", "rawType": "comparison_table", "block": null, "metadata": { "slideType": "comparison_table", "slideTypeCanon": { "name": "Comparison table", "slug": "comparison_table", "status": "active", "canonId": "019de52d-0a06-73f8-8813-fe022fab1de2", "version": 1, "description": null }, "function": "compare_peers", "functionCanon": { "name": "Compare peers", "slug": "compare_peers", "status": "active", "canonId": "019de52d-1453-72ba-a367-9ba3d34c1630", "version": 1, "description": null }, "density": "dense", "densityScore": 62, "componentCount": 6, "textChars": 920, "nDataPoints": 8, "notes": "The slide uses a table to contrast survey responses and reported metrics between two distinct executive groups.", "elementsJson": [ "headline_text", "paragraph", "comparison_table", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.5+00", "seconds": 2.848, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/26", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-26", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "43% of non-security executives versus 31% of security executives said that security was not part of the discussion and are now trying to catch up.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-cf2af74bcf55", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Perceived security effectiveness (well-protected from cyber threats): 52% vs 38%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:00+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf5-d07ad327d6e1", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.4, "x": 0.05, "y": 0.25 }, "kind": "paragraph", "text": "Our latest survey shows that there are still differences in how security and non-security executives see things. In all, their responses highlight gaps between security and non-security executives in how they perceive security effectiveness, budget and attack risks (Figure 15).", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.5+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "113f7b83-aa31-43a8-b104-81d1c8ca93cf", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.4, "x": 0.5, "y": 0.78 }, "kind": "source-note", "text": "Source: Accenture State of Cybersecurity Resilience 2021, security executives (N=4,244) and non-security executives (N=500)", "attrs": null, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.5+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "5f9f74de-7fe1-455f-944e-27da8a10ec00", "parentComponentId": null }, { "bbox": { "h": 0.5, "w": 0.45, "x": 0.5, "y": 0.25 }, "kind": "table", "text": "Figure 15. Differences of opinion between security executives and non-security executives. Columns: Security executives, Non-security executives. Rows: Security effectiveness (52%, 38%), Spending (15%, 26%), Attacks (270/180, 180/300).", "attrs": null, "canon": { "kind": { "name": "Table", "slug": "table", "status": "active", "canonId": "019de52c-f9c8-7148-8119-eaac9594cd28", "version": 1, "description": "Tabular data layout." }, "tool": null, "subkind": { "name": "Data table", "slug": "data", "status": "active", "canonId": "019de52d-02d5-75b8-8abf-88e92bf63569", "version": 1, "description": null }, "framework": null }, "subkind": "data", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.5+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9bbb9211-5f2b-4298-9c0d-163bfcd7dbd1", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.6, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "Are security and non-security executives on the same page?", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.5+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "11f55f34-12c7-4bec-b525-2bd4a0c46b36", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Perceived security effectiveness (well-protected from cyber threats)", "numberRaw": "52% vs 38%", "numberKind": "percent", "actionTitle": null, "calloutText": "43% of non-security executives versus 31% of security executives said that security was not part of the discussion and are now trying to catch up.", "numberScale": null, "numberValue": 52, "metricFamily": "other", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-41afb43e88b6", "evidence": "Question headline 'Are security and non-security executives on the same page?' frames the gap.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 88, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Audience Definition", "slug": "audience-definition", "status": "active", "bestFor": null, "canonId": "019dd956-7f2a-775d-aeee-ff099bcb7756", "version": 1, "bodyDocId": null, "description": "Six key questions: Who are they? What do they know? What do they believe? What do they care about? What do they fear? What decisions can they make?", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "2812129f-209a-4ec4-9e8a-ff7408cea4d9", "evidence": "security executives (N=4,244) and non-security executives (N=500)", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:27.269561+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Comparison frame", "slug": "comparison-frame", "status": "active", "bestFor": null, "canonId": "019dd9e1-484b-7399-a4fc-d14644b99f93", "version": 1, "bodyDocId": null, "description": "Two or more states/subjects placed side by side to expose a gap.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "3eb6a6b4-1a4d-45e2-98a9-b8fd81be7fd5", "evidence": "comparison_table with 'Security executives' and 'Non-security executives' columns", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:27.225777+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Concrete Language", "slug": "concrete-language", "status": "active", "bestFor": null, "canonId": "019dd956-bcd4-7398-9723-6aa72346170b", "version": 1, "bodyDocId": null, "description": "Using specific sensory details instead of abstract terms", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-4638d8f467e1", "evidence": "43% non-security vs 31% security executives on the late-cloud-security gap.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 78, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Contrast Principle", "slug": "contrast-principle", "status": "active", "bestFor": null, "canonId": "019dd956-bf0f-73ae-b9df-e60508cdaa65", "version": 1, "bodyDocId": null, "description": "Higher visual weight draws attention - use contrast strategically for emphasis", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Designer", "layer": "slide", "agents": [ "Designer" ], "matchId": "019dd95a-0d40-7758-be37-49cfe203029f", "evidence": "Contrast between two exec cohorts is the whole point of the slide.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 75, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 26, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 26, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 22, "name": "Solution & Approach", "beatId": "019dd95a-0680-7418-820b-f0b30fd9e7ba", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Evidence & Proof", "slug": "consultants-gambit-evidence-proof", "status": "active", "canonId": "019dd9b8-07b1-7688-8e1e-7637fec3802a", "version": 1, "description": null }, "evidence": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud).", "position": 4, "isPrimaryArc": true, "parentBeatType": { "name": "Evidence", "slug": "evidence", "status": "active", "canonId": "019dd9b8-03f9-772a-b84a-4f07b415b77a", "version": 1, "description": "A dedicated proof beat exists in only ~4 arcs (Gambit, Sequoia, AIDA, Monroes). Other arcs embed evidence inline within development." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [ { "to": 26, "from": 26, "loop": { "name": "04_tale_two_worlds", "slug": "04-tale-two-worlds", "status": "active", "bestFor": "Competitive analysis, benchmarking, case for change", "canonId": "019dd956-674f-750b-b15d-f082e2717f4e", "version": 1, "bodyDocId": "019df22a-2420-77be-bc41-ded96d08cb21", "structure": "Current State -> Desired State / Benchmark -> The Gap & Implication", "description": "Show the gap between two states to drive urgency or highlight opportunity", "familyLabel": null }, "matchId": "019dd95a-07fd-712f-b775-20623d50da77", "evidence": "Headline 'Are security and non-security executives on the same page?' with 43% vs 31% comparison.", "position": 5, "objective": "Contrast security vs non-security executive views as proof of misalignment", "confidence": 65, "extraction": { "at": "2026-04-29 13:07:29.547081+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null } } ], "locked": true }, { "page": 27, "type": "setup", "function": "transition", "rawType": "section_divider", "block": null, "metadata": { "slideType": "section_divider", "slideTypeCanon": { "name": "Section divider", "slug": "section_divider", "status": "active", "canonId": "019de52d-066a-7402-9554-6ae504999041", "version": 1, "description": null }, "function": "transition", "functionCanon": { "name": "Transition", "slug": "transition", "status": "active", "canonId": "019de52d-1365-7149-92aa-66df859e75fd", "version": 1, "description": null }, "density": "sparse", "densityScore": 10, "componentCount": 3, "textChars": 139, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "photo", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:51.855+00", "seconds": 2.19, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/27", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-27", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.012, "w": 0.422, "x": 0.052, "y": 0.92 }, "kind": "disclaimer", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.855+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "546ac446-0cb0-46a0-917e-4b66838d75d6", "parentComponentId": null }, { "bbox": { "h": 0.754, "w": 0.871, "x": 0.128, "y": 0.088 }, "kind": "image", "text": null, "attrs": null, "canon": { "kind": { "name": "Image", "slug": "image", "status": "active", "canonId": "019de52c-f978-701f-a720-51d029d769e7", "version": 1, "description": "Photo, illustration, screenshot or icon." }, "tool": null, "subkind": { "name": "Photo", "slug": "photo", "status": "active", "canonId": "019de52c-fd37-757f-b4a8-ca26d4888875", "version": 1, "description": null }, "framework": null }, "subkind": "photo", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.855+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "4a10b87e-09b7-4c34-a998-9af35b5dd602", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.53, "x": 0.048, "y": 0.155 }, "kind": "title", "text": "The path to cyber resilience", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:51.855+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7a63b6fc-251a-4ff0-ac09-cb253a63db7f", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 28, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 27, "name": "Impact & Next Steps", "beatId": "019dd95a-0680-7418-820b-f63c4f49c4bf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Impact & Next Steps", "slug": "consultants-gambit-impact-next-steps", "status": "active", "canonId": "019dd9b8-0849-7728-9ee9-fd1609c4c655", "version": 1, "description": null }, "evidence": "'Path to cyber resilience' divider and synthesis on aligning security with business strategy.", "position": 5, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [], "locked": true }, { "page": 28, "type": "resolution", "function": "summarize", "rawType": "key_takeaways", "block": null, "metadata": { "slideType": "key_takeaways", "slideTypeCanon": { "name": "Key takeaways", "slug": "key_takeaways", "status": "active", "canonId": "019de52d-06e7-7674-a891-9f7de3b11b6d", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 86, "componentCount": 9, "textChars": 1959, "nDataPoints": 2, "notes": null, "elementsJson": [ "headline_text", "action_title", "paragraph", "quote_block", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:53.187+00", "seconds": 3.488, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/28", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-28", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "By aligning their cybersecurity efforts with the business strategy, organizations can not only achieve better business outcomes, but also seize an advantage in the race to cyber resilience.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:37+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-41dae75a1bae", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "CISOs reporting directly to CEOs or Boards: 72%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:37+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-4bf8c0a4b7c9", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.15, "x": 0.66, "y": 0.5 }, "kind": "paragraph", "text": "CISO, Insurance industry", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:53.187+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "07c69cec-1a1a-4b2c-b92d-f749fcf3c344", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.25, "x": 0.35, "y": 0.28 }, "kind": "paragraph", "text": "As we have seen in this report, organizations that focus solely on business growth are missing out on the benefits of cyber resilience. And there are gains for those organizations that proactively seek out a strong synergistic alignment between security and the business. By aligning their cybersecurity efforts with the business strategy, organizations can not only achieve better business outcomes, but also seize an advantage in the race to cyber resilience.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:53.187+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "5acfa45c-bf3f-46df-aa35-39dc78af1774", "parentComponentId": null }, { "bbox": { "h": 0.45, "w": 0.28, "x": 0.05, "y": 0.28 }, "kind": "paragraph", "text": "We’re seeing familiar challenges that we’ve noted in the past—cyber attacks are spiralling upward, security investments are still on the rise and security’s relationship with cloud continues to prove challenging. Even the CISOs stature in the organization has grown—more CISOs than ever report directly to CEOs or Boards (72% in 2021 compared with 59% in 2020) and they’re being given more direct control over their budgets. In such a climate, where change is the byword, seeking out the best way to run security operations can make all the difference. It is not a one-way street.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:53.187+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "dd984ca5-8f86-42da-84f5-6a1749fe6ce5", "parentComponentId": null }, { "bbox": { "h": 0.15, "w": 0.28, "x": 0.66, "y": 0.32 }, "kind": "quote", "text": "Leadership is now highly invested in things like cyber resiliency; there’s a willingness to put more money that way. It’s a conversation that’s happening right now and it’s better than it ever was before.", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": null, "subkind": { "name": "Testimonial", "slug": "testimonial", "status": "active", "canonId": "019de52c-fc21-71b6-9ac3-8266a64945e8", "version": 1, "description": null }, "framework": null }, "subkind": "testimonial", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:53.187+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "18be8570-4671-4c01-8355-1662b4084f68", "parentComponentId": null }, { "bbox": null, "kind": "quote", "text": "\"Leadership is now highly invested in things like cyber resiliency; there's a willingness to put more money that way. It's a conversation that's happening right now and it's better than it ever was before.\" — CISO, Insurance industry", "attrs": null, "canon": { "kind": { "name": "Quote", "slug": "quote", "status": "active", "canonId": "019de52c-f8fb-751e-8bc6-d58e2d59562a", "version": 1, "description": "Pull quote or testimonial." }, "tool": { "name": "Authority citation", "slug": "authority-citation", "status": "active", "bestFor": null, "canonId": "019dd9e1-49ae-7557-89ad-3fca70469b45", "version": 1, "bodyDocId": null, "description": "Quoting an authority figure, study, or precedent to lend weight.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:37+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-4782a8045a44", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.55, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Although this has been a year like no other, it has emphasized the critical role of cybersecurity within the business and how important it is for cybersecurity and business strategies to align.", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Action title", "slug": "action-title", "status": "active", "canonId": "019de52c-fb31-734c-a0f5-a3935b73135d", "version": 1, "description": null }, "framework": null }, "subkind": "action-title", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:53.187+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "71a70b50-1f27-4eb4-a2ae-49823f749cd5", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.22, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "The path to cyber resilience", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:53.187+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "589c3f5d-23db-40d1-9946-983a3d78e340", "parentComponentId": null } ], "metrics": [ { "metricRaw": "CISOs reporting directly to CEOs or Boards", "numberRaw": "72%", "numberKind": "percent", "actionTitle": "Although this has been a year like no other, it has emphasized the critical role of cybersecurity within the business and how important it is for cybersecurity and business strategies to align.", "calloutText": "By aligning their cybersecurity efforts with the business strategy, organizations can not only achieve better business outcomes, but also seize an advantage in the race to cyber resilience.", "numberScale": null, "numberValue": 72, "metricFamily": "other", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Callback", "slug": "callback", "status": "active", "bestFor": null, "canonId": "019dd956-a3a9-708f-b4a3-d3da2181c576", "version": 1, "bodyDocId": null, "description": "Referencing earlier content for payoff and cohesion", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Storyteller", "layer": "loop", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-5fda20d83c08", "evidence": "Recaps attacks, budgets, cloud - the three p8-10 themes.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Action Titles", "slug": "action-titles", "status": "active", "bestFor": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "canonId": "019dd956-ac70-700b-a608-ba58e78f5dcc", "version": 1, "bodyDocId": "816dad3c-9983-41c1-a86e-978ebd582841", "description": "The McKinsey-bred discipline of writing every slide title as a complete declarative sentence with a verb and an insight, not a topic label. Each title is a sub-claim that ladders up to the deck's governing thought; read in sequence, the titles reconstruct the executive summary.", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Architect", "layer": "slide", "agents": [ "Architect" ], "matchId": "019dd95a-0d40-7758-be37-4c8b11a2d4c3", "evidence": "Headline restates the thesis: cybersecurity and business strategies must align.", "pageRefs": null, "priority": "Core", "whenToUse": "Any decision-grade deliverable — strategy recommendation, board update, investment memo, M&A review, post-mortem — where the reader is being asked to agree, decide, or act and will skim the title bar at speed.", "confidence": 90, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": "Solves two failure modes at once. (1) The buried claim: action titles place the conclusion on the page before any analysis is read, so a busy reader doesn't reverse-engineer it from the chart. (2) The spineless deck: because each title is a claim, slides have to ladder up to the governing thought; logical gaps become visible as topic-shaped titles in a sequence that no longer reads as a story.", "antipattern": "Topic labels disguised as titles — Volume by quarter, Key findings, Pricing strategy, Margins have been impacted. No verb, or a passive verb with no agent, or a fact (Revenue grew 12%) without the so-what. Also: titles that overreach the chart's evidence, multi-claim X-grew-but-Y-fell welded titles, and mechanical repetition of the same X-drove-Y template across the deck.", "cardinality": null, "narrativePurpose": "Forces the deck to carry its argument in the title bar so a senior reader can extract the recommendation without opening a single slide; converts a binder of topics into a navigable pyramid where every slide is a node defending the apex." }, { "tool": { "name": "Authority Bias", "slug": "authority-bias", "status": "active", "bestFor": null, "canonId": "019dd956-c38d-70b9-a284-b2b479763356", "version": 1, "bodyDocId": null, "description": "Expert opinions are weighted more heavily - cite credible sources", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Architect", "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-5a88b97e56ff", "evidence": "External practitioner quote backs the recommendation.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 70, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Call to action", "slug": "call-to-action", "status": "active", "bestFor": null, "canonId": "019dd9e1-4bbb-702a-9ead-82daf188bb7c", "version": 1, "bodyDocId": null, "description": "Explicit prescription of what the audience should do next.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "94c7120d-0580-4229-b2bc-d677c512614f", "evidence": "By aligning their cybersecurity efforts with the business strategy, organizations can not only achieve better business outcomes, but also seize an advantage in the race to cyber resilience.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.5, "extraction": { "at": "2026-07-17 03:52:27.439726+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Closing Techniques", "slug": "closing-techniques", "status": "active", "bestFor": null, "canonId": "019dd956-af13-774b-a4fd-7db0a3a88d51", "version": 1, "bodyDocId": null, "description": "Strong endings: Callback, challenge, vision, clear CTA, memorable line", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-53f50badb443", "evidence": "Closes with vision: 'seize an advantage in the race to cyber resilience.'", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 82, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Credibility Transfer", "slug": "credibility-transfer", "status": "active", "bestFor": null, "canonId": "019dd956-bd34-759a-8e3b-2f14b571a2a1", "version": 1, "bodyDocId": null, "description": "Borrowing authority from trusted sources or vivid details", "familyLabel": null, "categoryName": "Slide", "categorySlug": "slide" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "019dd95a-0d40-7758-be37-55cb1950ceb3", "evidence": "Pull-quote attributed to a CISO in the insurance industry.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 80, "extraction": { "at": "2026-04-29 13:07:30.88016+00", "model": "claude-legacy", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Storytelling: audience calibration", "slug": "audience", "status": "active", "bestFor": null, "canonId": "019df269-23ea-723a-87c0-af1d78d702d2", "version": 1, "bodyDocId": "019df269-23c5-72ec-8b94-78fc1da7b656", "description": "The same thesis, written for four different audiences, produces four", "familyLabel": "narrative-block", "categoryName": "Narrative & Transformation", "categorySlug": "narrative-transformation" }, "agent": "storyteller", "layer": "slide", "agents": [ "storyteller" ], "matchId": "7aefcce0-8080-4441-88d9-ca8b63c1d4bc", "evidence": "CISO, Insurance industry", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-17 03:52:27.396231+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 28, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [ { "to": 28, "arc": { "name": "The Consultant's Gambit", "slug": "consultants-gambit", "status": "active", "bestFor": "Business cases, project proposals, strategic recommendations", "canonId": "019dd956-5e0a-73c8-b305-81c38c959e9c", "version": 1, "bodyDocId": "019df22a-2356-73eb-8061-d8c81dc0aa49", "structure": "Situation & Context -> Problem & Complication -> Solution & Approach -> Evidence & Proof -> Impact & Next Steps", "description": null, "familyLabel": null }, "from": 27, "name": "Impact & Next Steps", "beatId": "019dd95a-0680-7418-820b-f63c4f49c4bf", "matchId": "019dd95a-0542-7728-a78d-441642cbb9ee", "beatType": { "name": "Impact & Next Steps", "slug": "consultants-gambit-impact-next-steps", "status": "active", "canonId": "019dd9b8-0849-7728-9ee9-fd1609c4c655", "version": 1, "description": null }, "evidence": "'Path to cyber resilience' divider and synthesis on aligning security with business strategy.", "position": 5, "isPrimaryArc": true, "parentBeatType": { "name": "Resolution", "slug": "resolution", "status": "active", "canonId": "019dd9b8-045d-703b-8dd7-e92aba3ba91b", "version": 1, "description": "How the deck ends. Required in 19/20 arcs. The exception (Sparkline) ends with new bliss which is functionally a resolution." }, "alignedBlockIds": null, "matchConfidence": 88 } ], "loops": [], "locked": true }, { "page": 29, "type": "setup", "function": "summarize", "rawType": "appendix_methodology", "block": null, "metadata": { "slideType": "appendix_methodology", "slideTypeCanon": { "name": "Appendix methodology", "slug": "appendix_methodology", "status": "active", "canonId": "019de52d-07d9-726c-8599-167f2d2ffaa7", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 86, "componentCount": 11, "textChars": 751, "nDataPoints": 41, "notes": null, "elementsJson": [ "headline_text", "paragraph", "big_number", "kpi_table" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.659+00", "seconds": 2.796, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/29", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-29", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "The State of Cybersecurity Resilience 2021 research surveyed 4,744 executives in March and April of 2021 to understand the extent to which organizations prioritize security, how comprehensive their security plans are and how their security investments are performing.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:38+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-5d22102277db", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.48, "x": 0.47, "y": 0.33 }, "kind": "list", "text": "List of 18 countries with respondent counts", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1c29f5e9-7e1d-4311-a770-6ef0f13bae03", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.48, "x": 0.47, "y": 0.57 }, "kind": "list", "text": "List of 23 industries with respondent counts", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "68d3b739-38a9-4c66-9b26-96ed19a97ecc", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.1, "x": 0.47, "y": 0.21 }, "kind": "metric", "text": "US$1B+ Revenues", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": null, "subkind": { "name": "Big number", "slug": "big-number", "status": "active", "canonId": "019de52c-fc70-70c8-b965-0584548a9204", "version": 1, "description": null }, "framework": null }, "subkind": "big-number", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "11d25284-9277-4325-b7c5-fbb88343b2cc", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.1, "x": 0.58, "y": 0.21 }, "kind": "metric", "text": "4,744 Total respondents", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": null, "subkind": { "name": "Big number", "slug": "big-number", "status": "active", "canonId": "019de52c-fc70-70c8-b965-0584548a9204", "version": 1, "description": null }, "framework": null }, "subkind": "big-number", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "1ad6331b-7caa-43ea-b3c2-8de2d1b80666", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.1, "x": 0.36, "y": 0.33 }, "kind": "metric", "text": "18 Countries", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": null, "subkind": { "name": "Big number", "slug": "big-number", "status": "active", "canonId": "019de52c-fc70-70c8-b965-0584548a9204", "version": 1, "description": null }, "framework": null }, "subkind": "big-number", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "28cdba02-dcdc-475c-b37a-d3189f87810d", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.1, "x": 0.36, "y": 0.57 }, "kind": "metric", "text": "23 Industries", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": null, "subkind": { "name": "Big number", "slug": "big-number", "status": "active", "canonId": "019de52c-fc70-70c8-b965-0584548a9204", "version": 1, "description": null }, "framework": null }, "subkind": "big-number", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "63cc0e6e-a3d0-4cae-96bc-5de79bd969f7", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.1, "x": 0.36, "y": 0.21 }, "kind": "metric", "text": "4th Annual Research Study", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": null, "subkind": { "name": "Big number", "slug": "big-number", "status": "active", "canonId": "019de52c-fc70-70c8-b965-0584548a9204", "version": 1, "description": null }, "framework": null }, "subkind": "big-number", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "66d16965-b08c-4c2f-8542-3e63e679419a", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Total respondents: 4,744", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:03:38+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-6147b6c7ab5b", "parentComponentId": null }, { "bbox": { "h": 0.2, "w": 0.3, "x": 0.05, "y": 0.27 }, "kind": "paragraph", "text": "The State of Cybersecurity Resilience 2021 research surveyed 4,744 executives in March and April of 2021 to understand the extent to which organizations prioritize security, how comprehensive their security plans are and how their security investments are performing.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "01214c03-19b6-402a-8e7d-69478c99d222", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.3, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "About the research", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.659+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0ed47fc0-bf3f-4ca3-88f6-53fd91b646de", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Total respondents", "numberRaw": "4,744", "numberKind": "plain", "actionTitle": null, "calloutText": "The State of Cybersecurity Resilience 2021 research surveyed 4,744 executives in March and April of 2021 to understand the extent to which organizations prioritize security, how comprehensive their security plans are and how their security investments are performing.", "numberScale": null, "numberValue": 4.744, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Audience Definition", "slug": "audience-definition", "status": "active", "bestFor": null, "canonId": "019dd956-7f2a-775d-aeee-ff099bcb7756", "version": 1, "bodyDocId": null, "description": "Six key questions: Who are they? What do they know? What do they believe? What do they care about? What do they fear? What decisions can they make?", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "61cd1ebb-31da-4e91-9876-98a417c13e1a", "evidence": "The State of Cybersecurity Resilience 2021 research surveyed 4,744 executives in March and April of 2021 to understand the extent to which organizations prioritize security, how comprehensive their security plan", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 21:01:48.672088+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 29, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null }, { "tool": { "name": "Audience Segmentation", "slug": "audience-segmentation", "status": "active", "bestFor": null, "canonId": "019dd956-8079-7046-8e6b-ecdf1bf15590", "version": 1, "bodyDocId": null, "description": "Grouping audience by attitude toward your message: Champions, Neutrals, Skeptics", "familyLabel": null, "categoryName": "Block", "categorySlug": "block" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "6ba1fbea-799b-44ad-83e0-4ab9c7a2d674", "evidence": "List of 23 industries with respondent counts\nList of 18 countries with respondent counts", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.7, "extraction": { "at": "2026-07-16 21:01:48.704178+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 29, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 30, "type": "setup", "title": "The slide includes a specific mathematical model for calculating the cost of cyber crime, breaking it down into probability, average cost per attack, and total ", "function": "present_framework", "rawType": "appendix_methodology", "block": null, "metadata": { "slideType": "appendix_methodology", "slideTypeCanon": { "name": "Appendix methodology", "slug": "appendix_methodology", "status": "active", "canonId": "019de52d-07d9-726c-8599-167f2d2ffaa7", "version": 1, "description": null }, "function": "present_framework", "functionCanon": { "name": "Present framework", "slug": "present_framework", "status": "active", "canonId": "019de52d-1403-7667-9100-d2ac6709f750", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 77, "componentCount": 8, "textChars": 1153, "nDataPoints": 1, "notes": "The slide includes a specific mathematical model for calculating the cost of cyber crime, breaking it down into probability, average cost per attack, and total number of attacks.", "elementsJson": [ "headline_text", "subtitle_text", "paragraph", "bullet_list", "infographic", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:57.345+00", "seconds": 7.322, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/30", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-30", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "We created a formula to assess the cost of cyber crime for a company: the average cost per attack, multiplied by the total number of attacks.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:04:02+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-7640181d15f4", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.55, "x": 0.357, "y": 0.357 }, "kind": "diagram", "text": "Figure 16. Modeling formula to assess the cost of cyber crime", "attrs": null, "canon": { "kind": { "name": "Diagram", "slug": "diagram", "status": "active", "canonId": "019de52c-f9f0-734a-81de-15382ff28c65", "version": 1, "description": "Schematic or relational diagram." }, "tool": null, "subkind": { "name": "Process flow", "slug": "process", "status": "active", "canonId": "019de52d-039c-718f-ad3a-efe9c4b3c838", "version": 1, "description": null }, "framework": null }, "subkind": "process", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2c3c895e-0e89-40a1-9d07-0d8b58b2893e", "parentComponentId": null }, { "bbox": { "h": 0.06, "w": 0.58, "x": 0.35, "y": 0.78 }, "kind": "disclaimer", "text": "Note: For the modeling exercises, we ran our analysis on a sample of 3,455 organizations that responded to all key components of the cost of cyber crime model. We assume variables in purple to remain constant in the series of “what if” experiments we conduct. Damage type includes attacks that are: (1) Significant, (2) Moderate, (3) Minor and (4) No impact.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a2ee227e-4fa0-430d-95c6-b029ef1a5dbb", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.15, "x": 0.05, "y": 0.32 }, "kind": "list", "text": "Stop more attacks\nFind breaches faster\nFix breaches faster\nLower breach impact", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Bullet list", "slug": "bullet", "status": "active", "canonId": "019de52c-fc98-7169-a083-5cab805076ca", "version": 1, "description": null }, "framework": null }, "subkind": "bullet", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "89eddd98-9147-462a-8091-956de087a48e", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Sample size: 3,455", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:04:02+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-78bb677a2a6f", "parentComponentId": null }, { "bbox": { "h": 0.09, "w": 0.28, "x": 0.05, "y": 0.22 }, "kind": "paragraph", "text": "Continuing our approach from previous years, we first defined leaders in cyber resilience as those who exhibit high-performance (top 20% of sample) in at least three of the following four performance criteria:", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "078eec30-7a73-440a-a0fc-1bb39b2bf6db", "parentComponentId": null }, { "bbox": { "h": 0.09, "w": 0.28, "x": 0.05, "y": 0.42 }, "kind": "paragraph", "text": "We then conducted a series of “what if” experiments to explore the return on investment of improving these cybersecurity practices. We created a formula to assess the cost of cyber crime for a company: the average cost per attack, multiplied by the total number of attacks.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "0c03539d-ae90-4760-b876-d3cb76ab150c", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.18, "x": 0.05, "y": 0.15 }, "kind": "title", "text": "Our methodology", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "90ee6f01-0cd8-4f5c-894d-2be9bed9e440", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Sample size", "numberRaw": "3,455", "numberKind": "plain", "actionTitle": null, "calloutText": "We created a formula to assess the cost of cyber crime for a company: the average cost per attack, multiplied by the total number of attacks.", "numberScale": null, "numberValue": 3.455, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "Analytical method", "slug": "analytical-method", "status": "active", "bestFor": null, "canonId": "b42c4911-7946-49b5-951c-5f3d23f4e2bd", "version": 1, "bodyDocId": null, "description": "Diagnostic / structuring methods (5-whys, fishbone, issue tree, hypothesis-driven).", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "afb84435-9306-4c0b-a1c5-fdd9d8c1f7c5", "evidence": "We then conducted a series of “what if” experiments to explore the return on investment of improving these cybersecurity practices. We created a formula to assess the cost of cyber crime for a company", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.8, "extraction": { "at": "2026-07-16 21:01:48.765285+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 30, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null }, { "tool": { "name": "Data Story Arc", "slug": "data-story-arc", "status": "active", "bestFor": null, "canonId": "019dd956-9c30-728e-b974-d3fb123dcf5a", "version": 1, "bodyDocId": null, "description": "Context → Conflict → Insight → Implication structure for data narratives", "familyLabel": null, "categoryName": "Loop", "categorySlug": "loop" }, "agent": "Storyteller", "layer": "slide", "agents": [ "Storyteller" ], "matchId": "f14c4d35-532b-49b4-8ae2-b4faf3f90949", "evidence": "Figure 16. Modeling formula to assess the cost of cyber crime", "pageRefs": null, "priority": "Core", "whenToUse": null, "confidence": 0.6, "extraction": { "at": "2026-07-16 21:01:48.797056+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 30, "whyItWorks": null, "antipattern": null, "cardinality": null, "narrativePurpose": null } ], "frameworks": [ { "matchId": "78d62fe8-a7a7-4eec-b780-3033429fa620", "evidence": "The slide presents a mathematical formula for modeling the cost of cyber crime.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:57.345+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 30, "frameworkName": "analytical-method" } ], "arcBeats": [], "loops": [], "locked": true }, { "page": 31, "type": "setup", "title": "The slide uses a 2x2 matrix structure to categorize survey respondents into four segments: Business Blockers, Cyber Champions, The Vulnerable, and Cyber Risk Ta", "function": "present_framework", "rawType": "appendix_methodology", "block": null, "metadata": { "slideType": "appendix_methodology", "slideTypeCanon": { "name": "Appendix methodology", "slug": "appendix_methodology", "status": "active", "canonId": "019de52d-07d9-726c-8599-167f2d2ffaa7", "version": 1, "description": null }, "function": "present_framework", "functionCanon": { "name": "Present framework", "slug": "present_framework", "status": "active", "canonId": "019de52d-1403-7667-9100-d2ac6709f750", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 90, "componentCount": 10, "textChars": 1587, "nDataPoints": 8, "notes": "The slide uses a 2x2 matrix structure to categorize survey respondents into four segments: Business Blockers, Cyber Champions, The Vulnerable, and Cyber Risk Takers.", "elementsJson": [ "headline_text", "paragraph", "numbered_list", "kpi_table", "big_number", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:54.649+00", "seconds": 4.461, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/31", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-31", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Strength of alignment was defined by the following components: (1) the extent to which business objectives are a priority for overall business strategy and cybersecurity is consulted when planning; (2) the extent to which respondents agreed with statements on organization-wide involvement in understanding and mitigating cyber risk.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:04:14+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-aad543930dda", "parentComponentId": null }, { "bbox": { "h": 0.32, "w": 0.5, "x": 0.35, "y": 0.26 }, "kind": "diagram", "text": "2x2 matrix showing Business Blockers, Cyber Champions, The Vulnerable, and Cyber Risk Takers with percentages and respondent counts.", "attrs": null, "canon": { "kind": { "name": "Diagram", "slug": "diagram", "status": "active", "canonId": "019de52c-f9f0-734a-81de-15382ff28c65", "version": 1, "description": "Schematic or relational diagram." }, "tool": null, "subkind": { "name": "2x2 quadrant", "slug": "2x2", "status": "active", "canonId": "019de52d-03ed-7745-9405-cac1d19d43bf", "version": 1, "description": null }, "framework": null }, "subkind": "2x2", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f2f6171f-86c3-4211-b53e-bab4d8d3fe1c", "parentComponentId": null }, { "bbox": { "h": 0.25, "w": 0.28, "x": 0.05, "y": 0.43 }, "kind": "list", "text": "1. The extent to which business objectives are a priority for the organization's overall business strategy and the extent to which cybersecurity is consulted when planning for these business areas. 2. The extent to which respondents agreed or disagreed with statements on alignment.", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Numbered list", "slug": "numbered", "status": "active", "canonId": "019de52c-fcc0-7718-a284-a4250c805df2", "version": 1, "description": null }, "framework": null }, "subkind": "numbered", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "35b173ec-b521-4fa7-80a6-15cabec953aa", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "share of survey sample: 55%", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:04:14+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-ac186cbf1861", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.35, "x": 0.35, "y": 0.61 }, "kind": "paragraph", "text": "We then continued our “what if” experiments based on the equation presented on page 30 to study the return on investments from alignment.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "9961b787-fc09-4343-9e19-60c7bd7a3b39", "parentComponentId": null }, { "bbox": { "h": 0.11, "w": 0.28, "x": 0.05, "y": 0.26 }, "kind": "paragraph", "text": "Next, we examined how strength of alignment between cybersecurity strategy and business strategy impacted cyber resilience. Strength of alignment was defined by the following components:", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a39e3554-6900-448d-9e8c-309dbe7b9815", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.28, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "We ran our modeling analysis on a sample subset of 3,455 organizations that responded to all key components of the cost of cyber crime model.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "cee4e521-6f4a-4227-84ea-6f61edde1f5d", "parentComponentId": null }, { "bbox": { "h": 0.08, "w": 0.35, "x": 0.35, "y": 0.15 }, "kind": "paragraph", "text": "Both components are rescaled to between 0 and 100 and averaged to arrive at a final alignment score. Taking these definitions of cyber resilience and alignment, we grouped our sample into four levels of cyber resilience:", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "fe49aad8-3562-4957-92bd-73bf4e6b889f", "parentComponentId": null }, { "bbox": { "h": 0.02, "w": 0.45, "x": 0.05, "y": 0.92 }, "kind": "source-note", "text": "Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": { "numbered": true }, "canon": { "kind": { "name": "Source note", "slug": "source-note", "status": "active", "canonId": "23484952-494b-4a5e-b1ad-550d0d70e948", "version": 1, "description": "Attribution / source / caveat placed at the slide footer. Numbered footnotes use attrs.numbered." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "537dd4f9-e4ad-4f28-9d6e-640c1eeb06ba", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.17, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "About the research", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "7323092f-2efd-42e4-bcf8-8a680d56e6a5", "parentComponentId": null } ], "metrics": [ { "metricRaw": "share of survey sample", "numberRaw": "55%", "numberKind": "percent", "actionTitle": null, "calloutText": "Strength of alignment was defined by the following components: (1) the extent to which business objectives are a priority for overall business strategy and cybersecurity is consulted when planning; (2) the extent to which respondents agreed with statements on organization-wide involvement in understanding and mitigating cyber risk.", "numberScale": null, "numberValue": 55, "metricFamily": "survey_sentiment", "numberCurrency": null } ], "tools": [ { "tool": { "name": "2x2 matrix", "slug": "matrix-2x2", "status": "active", "bestFor": null, "canonId": "019dd9e1-50ab-72d1-8afb-3ab0a38e32a8", "version": 1, "bodyDocId": null, "description": "BCG matrix, importance/urgency, any axes-and-quadrants frame.", "familyLabel": null, "categoryName": null, "categorySlug": null }, "agent": null, "layer": "slide", "agents": null, "matchId": "89bf76d4-752d-4ae3-a853-77476745d372", "evidence": "2x2 matrix showing Business Blockers, Cyber Champions, The Vulnerable, and Cyber Risk Takers with percentages and respondent counts.", "pageRefs": null, "priority": null, "whenToUse": null, "confidence": 0.9, "extraction": { "at": "2026-07-16 20:59:06.512962+00", "model": "or:meta-llama/llama-4-scout", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 31, "whyItWorks": null, "antipattern": null, "cardinality": "common", "narrativePurpose": null } ], "frameworks": [ { "matchId": "701c456d-189e-4504-bc36-f42abf283f12", "evidence": "The slide organizes data into a 2x2 grid of four distinct segments.", "framework": null, "confidence": 0.9, "extraction": { "at": "2026-05-02 19:51:54.649+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "pageNumber": 31, "frameworkName": "matrix-2x2" } ], "arcBeats": [], "loops": [], "locked": true }, { "page": 32, "type": "appendix", "function": "appendix", "rawType": "appendix_disclosure", "block": null, "metadata": { "slideType": "appendix_disclosure", "slideTypeCanon": { "name": "Appendix disclosure", "slug": "appendix_disclosure", "status": "active", "canonId": "019de52d-07b2-7549-8e8b-932a19f6e616", "version": 1, "description": null }, "function": "appendix", "functionCanon": { "name": "Appendix", "slug": "appendix", "status": "active", "canonId": "019de52d-138d-750b-83c3-49b4bc7a7a38", "version": 1, "description": null }, "density": "sparse", "densityScore": 17, "componentCount": 2, "textChars": 373, "nDataPoints": 0, "notes": null, "elementsJson": [ "headline_text", "numbered_list", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:52.424+00", "seconds": 2.192, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/32", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-32", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": { "h": 0.35, "w": 0.5, "x": 0.05, "y": 0.18 }, "kind": "list", "text": "1. Accenture Research analysis of 1,548 Securities Exchange Commission 10-K quarterly reports across 500 companies during 2017 to 2020\n2. Third Annual State of Cyber Resilience, Accenture 2020\n3. The Cloud Continuum, Accenture 2021\n4. Make the Leap, Take the Lead, Accenture 2021\n5. Ransomware response and recovery, Accenture 2021\n6. Secure Cloud, Accenture 2021", "attrs": null, "canon": { "kind": { "name": "List", "slug": "list", "status": "active", "canonId": "019de52c-f94b-779b-a53b-fd4904a5f4d2", "version": 1, "description": "Bullet or numbered list." }, "tool": null, "subkind": { "name": "Numbered list", "slug": "numbered", "status": "active", "canonId": "019de52c-fcc0-7718-a284-a4250c805df2", "version": 1, "description": null }, "framework": null }, "subkind": "numbered", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.424+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "89b7b527-0d47-4589-9f33-873ae56dd5a2", "parentComponentId": null }, { "bbox": { "h": 0.05, "w": 0.25, "x": 0.05, "y": 0.08 }, "kind": "title", "text": "References", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:52.424+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "3d632fb8-4c5f-4cba-9114-206d4b12aa52", "parentComponentId": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [], "loops": [], "locked": true }, { "page": 33, "type": "setup", "title": "Standard corporate boilerplate and legal disclaimer slide.", "function": "summarize", "rawType": "appendix_disclosure", "block": null, "metadata": { "slideType": "appendix_disclosure", "slideTypeCanon": { "name": "Appendix disclosure", "slug": "appendix_disclosure", "status": "active", "canonId": "019de52d-07b2-7549-8e8b-932a19f6e616", "version": 1, "description": null }, "function": "summarize", "functionCanon": { "name": "Summarize", "slug": "summarize", "status": "active", "canonId": "019de52d-1541-704f-b86f-bf7b75056373", "version": 1, "description": null }, "density": "overcrowded", "densityScore": 83, "componentCount": 9, "textChars": 4073, "nDataPoints": 0, "notes": "Standard corporate boilerplate and legal disclaimer slide.", "elementsJson": [ "headline_text", "paragraph", "footnote" ], "confidence": 1, "extraction": { "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "at": "2026-05-02 19:51:54.404+00", "seconds": 4.095, "promptVersion": "v2-canon-conditioned" } }, "links": { "slide": "/slides/019dd923-5ca1-7489-b633-19061fbe2812/33", "deck": "/decks/019dd923-5ca1-7489-b633-19061fbe2812", "deckAnchor": "/decks/019dd923-5ca1-7489-b633-19061fbe2812#slide-33", "deckJson": "/decks/019dd923-5ca1-7489-b633-19061fbe2812.json" }, "components": [ { "bbox": null, "kind": "callout", "text": "Accenture is a global professional services company with leading capabilities in digital, cloud and security.", "attrs": null, "canon": { "kind": { "name": "Callout", "slug": "callout", "status": "active", "canonId": "019de52c-f8d3-761a-8953-7d37080de5e2", "version": 1, "description": "Highlighted callout box." }, "tool": { "name": "Visual emphasis", "slug": "visual-emphasis", "status": "active", "bestFor": null, "canonId": "019dd9e1-474b-736b-a8eb-a794dd88241c", "version": 1, "bodyDocId": null, "description": "Drawing the eye to one element above the rest of the slide.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:04:36+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-c94603ec51b8", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.9, "x": 0.05, "y": 0.56 }, "kind": "disclaimer", "text": "This document refers to marks owned by third parties. All such third-party marks are the property of their respective owners. No sponsorship, endorsement or approval of this content by the owners of such marks is intended, expressed or implied. This content is provided for general information purposes and is not intended to be used in place of consultation with our professional advisors. Given the inherent nature of threat intelligence, the content contained in this report is based on information gathered and understood at the time of its creation. The information in this report is general in nature and does not take into account the specific needs of your IT ecosystem and network, which may vary and require unique action. As such, Accenture provides the information and content on an “as-is” basis without representation or warranty and accepts no liability for any action or failure to act taken in response to the information contained or referenced in this report. The reader is responsible for determining whether or not to follow any of the suggestions, recommendations or potential mitigations set out in this report, entirely at their own discretion. Accenture, the Accenture logo, and other trademarks, service marks, and designs are registered or unregistered trademarks of Accenture and its subsidiaries in the United States and in foreign countries. All trademarks are properties of their respective owners. All materials are intended for the original recipient only. The reproduction and distribution of this material is forbidden without express written permission from Accenture. The opinions, statements, and assessments in this cybersecurity report are solely those of the individual author(s) and do not constitute legal advice, nor do they necessarily reflect the views of Accenture, its subsidiaries, or affiliates. Copyright © 2021 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.", "attrs": null, "canon": { "kind": { "name": "Disclaimer", "slug": "disclaimer", "status": "active", "canonId": "91173477-d91f-4024-bbaf-d4f93e3f82dc", "version": 1, "description": "Legal/cautionary text that occupies most of the body of its slide." }, "tool": null, "subkind": null, "framework": null }, "subkind": null, "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "44c4128a-c496-4322-9cd6-1db1402b8e77", "parentComponentId": null }, { "bbox": null, "kind": "metric", "text": "Accenture workforce: 624,000 people", "attrs": null, "canon": { "kind": { "name": "Metric", "slug": "metric", "status": "active", "canonId": "019de52c-f923-73bf-8081-d0b1a8c5264d", "version": 1, "description": "Big-number or KPI value." }, "tool": { "name": "Quantification", "slug": "quantification", "status": "active", "bestFor": null, "canonId": "019dd9e1-47ab-72ce-a079-aab1f5299e88", "version": 1, "bodyDocId": null, "description": "Translating a claim into numbers, charts, or tables.", "familyLabel": null }, "subkind": null, "framework": null }, "subkind": "primary", "groupRole": null, "confidence": null, "extraction": { "at": "2026-04-24 04:04:36+00", "model": "claude-code-default", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "019dd951-9f67-75d3-8bf6-cf74f5a0a20b", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.28, "x": 0.05, "y": 0.15 }, "kind": "paragraph", "text": "Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services—all powered by the world's largest network of Advanced Technology and Intelligent Operations centers. Our 624,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "2b564c87-61ba-432c-8ff7-6f1d9f49bdcf", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.28, "x": 0.357, "y": 0.15 }, "kind": "paragraph", "text": "Accenture Security is a leading provider of end-to-end cybersecurity services, including advanced cyber defense, applied cybersecurity solutions and managed security operations. We bring security innovation, coupled with global scale and a worldwide delivery capability through our network of Advanced Technology and Intelligent Operations centers. Helped by our team of highly skilled professionals, we enable clients to innovate safely, build cyber resilience and grow with confidence. Follow us @AccentureSecure on Twitter or visit us at www.accenture.com/security.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "62af2a78-58b0-4a4a-a5af-8ebbb6dd7dd3", "parentComponentId": null }, { "bbox": { "h": 0.35, "w": 0.28, "x": 0.663, "y": 0.15 }, "kind": "paragraph", "text": "Accenture Research shapes trends and creates data driven insights about the most pressing issues global organizations face. Combining the power of innovative research techniques with a deep understanding of our clients' industries, our team of 300 researchers and analysts spans 20 countries and publishes hundreds of reports, articles and points of view every year. Our thought-provoking research—supported by proprietary data and partnerships with leading organizations, such as MIT and Harvard—guides our innovations and allows us to transform theories and fresh ideas into real-world solutions for our clients. For more information, visit www.accenture.com/research.", "attrs": null, "canon": { "kind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "5f2affc0-941d-4d07-959d-4bfc1930cea4", "version": 1, "description": "Single prose block in the body of a slide." }, "tool": null, "subkind": { "name": "Paragraph", "slug": "paragraph", "status": "active", "canonId": "019de52c-fb80-75af-aa5c-a7a4bfac2433", "version": 1, "description": null }, "framework": null }, "subkind": "paragraph", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "f4d02e6f-a270-4bdc-8b19-ed81ccf17504", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.28, "x": 0.357, "y": 0.09 }, "kind": "title", "text": "About Accenture Security", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "44cfef0d-f13b-4e4b-a7c6-1baaad5745fb", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.05, "y": 0.09 }, "kind": "title", "text": "About Accenture", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "a2947484-08f4-498a-b07b-d95a2b24ba8f", "parentComponentId": null }, { "bbox": { "h": 0.03, "w": 0.28, "x": 0.663, "y": 0.09 }, "kind": "title", "text": "About Accenture Research", "attrs": null, "canon": { "kind": { "name": "Title", "slug": "title", "status": "active", "canonId": "019de52c-f7dd-76d9-b848-b1f12bd85cf4", "version": 1, "description": "Slide title or headline." }, "tool": null, "subkind": { "name": "Headline", "slug": "headline", "status": "active", "canonId": "019de52c-fae1-7463-9a7c-d60668eced0d", "version": 1, "description": null }, "framework": null }, "subkind": "headline", "groupRole": null, "confidence": null, "extraction": { "at": "2026-05-02 19:51:54.404+00", "model": "google/gemini-3.1-flash-lite-preview-20260303", "runId": null, "seconds": null, "promptVersion": null }, "componentId": "e772cd5f-e926-4aa1-ac65-ab0a6466fdd5", "parentComponentId": null } ], "metrics": [ { "metricRaw": "Accenture workforce", "numberRaw": "624,000 people", "numberKind": "plain", "actionTitle": null, "calloutText": "Accenture is a global professional services company with leading capabilities in digital, cloud and security.", "numberScale": null, "numberValue": 624, "metricFamily": "employment", "numberCurrency": null } ], "tools": [], "frameworks": [], "arcBeats": [], "loops": [], "locked": true } ], "arcBeats": [ { "from": 4, "to": 10, "label": "Situation & Context", "description": "Championing cybersecurity divider + state-of-the-world stats: attacks up, budgets up, cloud lagging." }, { "from": 11, "to": 14, "label": "Problem & Complication", "description": "'Why alignment matters' divider + Business Blockers lag Champions on key measures." }, { "from": 15, "to": 21, "label": "Evidence & Proof", "description": "Value-at-stake bridges per segment (48%, 65%) and Champions performance data." }, { "from": 22, "to": 26, "label": "Solution & Approach", "description": "'How to be a Cyber Champion' + 3 pillars (CISO seat, threat-centric, secure cloud)." }, { "from": 27, "to": 28, "label": "Impact & Next Steps", "description": "'Path to cyber resilience' divider and synthesis on aligning security with business strategy." } ], "loops": [ { "from": 5, "to": 6, "label": "2x2 Matrix", "description": "Introduce the Cyber Quadrant framework that defines the 4 archetypes" }, { "from": 8, "to": 10, "label": "Aha Moment", "description": "Show the data on where the cybersecurity world is now" }, { "from": 12, "to": 21, "label": "Segmentation Split", "description": "Walk segment by segment to expose performance differences and value at stake" }, { "from": 22, "to": 25, "label": "Precedent", "description": "Tell readers to replicate what Cyber Champions already do" }, { "from": 26, "to": 26, "label": "Tale Two Worlds", "description": "Contrast security vs non-security executive views as proof of misalignment" } ] }