InfoSec's recent data analytics focus ignores a) a lack of focused asset management, and b) the lack of actual system design and architecture in many organizations. Beyond logs, SIEM tools and analytics, organizations need architectures that protect critical assets and business processes. Leveraging experience from online banking, we'll propose a bunker-like architecture for critical assets.