Resources

Share the model.

Every diagram on this site is free to use, adapt, and redistribute under CC BY 4.0 — just credit theIOM.org. Put them in your deck, your blog post, your RFP. The more the model spreads, the faster the category forms.

Download all diagrams (ZIP)

Start here · The specification

The IOM Standard

Before the diagrams, the document everything else illustrates: the normative IOM specification, with the conformance requirements implementations are measured against.

v1.0 draft · Proposed vendor-neutral standard · CC BY 4.0

Read the standard
The license

Free to share. Free to adapt.

These diagrams are released under Creative Commons Attribution 4.0. You can use them anywhere — including commercially — and you can modify them. The only requirement is attribution.

Copy this credit line

“Infrastructure Operating Model — theIOM.org, CC BY 4.0”

The diagram library

Nine diagrams. Five formats each.

Each is available as SVG (scalable, editable), PNG (slides and docs), Social (1200×630) and Square (1080×1080) for posts, and PDF (print). All branded and attribution-ready.

WHAT ACTS ON INFRASTRUCTUREAIAutomationSecurityComplianceTHE AUTHORITY LAYERINFRASTRUCTURE OPERATING MODELDefines what is legitimate — before execution occurs.CloudNetworkComputeStorageTHE INFRASTRUCTURE THAT EXECUTES

The Infrastructure Authority Stack

The category in one image: AI, automation, security, and compliance all route through the IOM — the authority layer above cloud, network, compute, and storage.

Download  SVG · PNG · Social · Square · PDF

ERAOPERATING MODELMainframeOperationsClient / ServerSystems ManagementVirtualizationVM ManagementCloudCloud Operating ModelInfrastructure as CodeAutomationAI InfrastructureInfrastructure Operating Model

Era → Operating Model

The historical case in one table: every infrastructure era produced a new operating model. AI’s is the IOM.

Download  SVG · PNG · Social · Square · PDF

REPRESENTATIONDigital TwinObserveModelSimulateExplain“What exists?”AUTHORITYIOMIntentValidateAuthorizeGovern“What is legitimate?”

Representation vs. Authority

The category in one image: a digital twin observes, models, simulates, explains — “what exists?” An IOM declares intent, validates, authorizes, governs — “what is legitimate?”

Download  SVG · PNG · Social · Square · PDF

INFERENCEObservability · AIOps · Digital twins · DiscoveryAUTHORITYInfrastructure Operating ModelRuntime observationlogs · metrics · traces · flowsDeclared intentblueprints · ownership · constraintsProbabilistic modelinfers structure from signalsAuthoritative modelthe IOM“What probably happened”“What is legitimate”Advisory · Post-hoc · ProbabilisticGoverning · Pre-execution · DeterministicAuthority cannot be inferred from observation.It must be declared.

Inference vs. Authority

Why the IOM must exist: inference yields “what probably happened,” authority yields “what is legitimate.” The two cannot be substituted.

Download  SVG · PNG · Social · Square · PDF

INTENT — THE MODEL What exists What is intended What is legitimate EVERY PROPOSED ACTION Human change CI/CD pipeline AI agent THE AUTHORITY LAYER checks each action against intent — before it executes legitimacy ownership blast radius ADMITTED legitimate — passes to execution BLOCKED not what intent allows EXECUTION Cloud Network Identity On-prem

The Authority Layer

The gate: every proposed action — human, pipeline, or AI — validated against intent before it executes.

Download  SVG · PNG · Social · Square · PDF

CAPABILITY OVER CHANGE → none total THE AUTHORITY LINE You can model everything here — and still govern nothing. knowing ≠ governing What you can SEE The false finish line What you can GOVERN — an IOM lifts you across the line Pre-IOM0–18 Emerging19–36 Developing37–54 Governed55–72 ↑ most organizations sit short of the line REACTIVEAWAREIN AUTHORITY

The Maturity Climb

Why seeing isn’t governing: observability scales with maturity; authority stays flat until you cross the line.

Download  SVG · PNG · Social · Square · PDF

ERA 1PhysicalInfrastructureDirect control,configured by handERA 2VirtualizationAbstracted fromhardware; densityERA 3CloudOn-demand, elastic,API-drivenERA 4Infrastructureas CodeVersioned, repeatable,reviewableERA 5 · NOWAI-OperatedInfrastructureSystems that act atmachine speedTHEREFOREThe Authority LayerDecides what is legitimate, before executionInfrastructure built for human decision speed cannot governinfrastructure operating at machine speed.

Five Eras of Execution

Each era made execution faster and more autonomous. None added authority. The fifth removes the human.

Download  SVG · PNG · Social · Square · PDF

ObserveState + telemetryModelCanonical stateValidateContext + authorityExecuteGoverned actionLearnEvidence + refinementUnderstanding governs execution.

The IOM Operating Loop

Observe → Model → Validate → Execute → Learn. Understanding governs execution, every cycle.

Download  SVG · PNG · Social · Square · PDF

SOURCES OF LEGITIMACY Intent Policy Ownership Relationships Constraints THE AUTHORITY LAYER Infrastructure Operating Model The source of legitimacy for everything that acts on infrastructure. Security AI Automation Compliance Operations GOVERNED DISCIPLINES all of which act on — EXECUTION ENVIRONMENT Cloud · Network · Identity · Applications · On-Prem · Edge

The Authority Layer in Context

Where the authority layer sits: one source of legitimacy above every discipline that acts on infrastructure.

Download  SVG · PNG · Social · Square · PDF