The "Zero Day" Concept: Readiness for the Unmodeled

In the domain of cybersecurity, a "Zero Day" exploit refers to a vulnerability that is known to the attacker but unknown to the defender, meaning the defender has had "zero days" to prepare a patch or fix. These are often the most devastating attacks because standard defenses (firewalls, antivirus definitions) are blind to them.

In the OPA-1 Safety Doctrine, we appropriate this term to describe unmodeled safety risks—hazards that exist in the system but have not yet appeared in lagging indicators, linear audits, or risk registers. These are the "unknown unknowns" or the "latent pathogens" residing within the organization's culture or processes.

The "November Zero Day" event is not about reacting to a disaster that has already occurred. Rather, ...