<a id="ch-17"></a>

## Chapter 17 — The three-month check is a habit, not a second run

<!-- open-cyber-academy:lesson-figures:start ch-17 -->
### Lesson map

Lesson 17. Map, example, EX063.

```mermaid
flowchart TD
  A["Report signed and stored with the list"] --> B["Habit: check the list every three months"]
  B --> C{"Has that later check been run?"}
  C -->|No| D["Keep one account print and one checklist print"]
```

A habit tells the shop what to repeat. It is not evidence that the repetition already happened.

### Logical drawing

```text
the report contains
    what was found, what changed
    score from 2 to 7 of 8
    recovery still open
    supplier portal next
    three habits
stored
    in the password manager, with the list
    Rosa signs, Joseph has reviewed
not shown
    a second account run three months later
```
<!-- open-cyber-academy:lesson-figures:end ch-17 -->

### Learning outcomes

After this chapter, you should be able to:

1. List what the one-page report is allowed to say.
2. Keep the three-month check as a habit.
3. Leave the supplier portal as the next account.

### 17.1 The report points at the prints. It does not replace them.

Mia's one-page report uses plain words: what was found, what was changed, the checklist score from 2 to 7 of 8, what remains, and three habits. The habits are to add and remove people promptly, to keep a second step on every account, and to check the account list every three months. Joseph reviews the report. Rosa signs it and keeps it in the password manager beside the account list, so the next person who opens the list also sees what was agreed. Chapter 3 saved the account output with a date so a later check could be compared. That date is not printed, and the comparison is not shown. "Every three months" is an instruction in the report. It is not a second embedded run, and it does not change `accounts 7, MFA on 3` or `shared accounts: 3`. The supplier portal remains the next account inside that same report. Storing the page does not secure the portal, and signing it does not complete the recovery update. Whoever next reads the list should still see the open items.

### 17.2 Worked example

Let the report cite the score it was given. Do not let it improve the score.

| Report line | Standing | Decision |
|---|---|---|
| Score from 2 of 8 to 7 of 8 | Matches the checklist print | May stay |
| Three habits, including a three-month look | Written as habits | May stay |
| Supplier portal next | Still next | May stay |
| "The three-month check has already been run." | No second print | Refuse |

> **Synthetic case.** The report is a synthetic page in a synthetic manager. It is not a notice to customers.

### Errors and limits

A signed page can still contain future work. Storage beside the list makes the open items easier to find. It does not close them.

### Apply

- **EX063 — Has the later check happened?** The report says to check the account list every three months, and Rosa signs it. The supplier portal is named as next. Which later run do you attach, and is the portal finished? *Rubric:* 3 = no later run is in the file; the habit stays a habit; the portal stays next; the stored report does not change either print;; 2 = no second run and the portal stays next;; 1 = the signature only;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-17 -->
### Continue studying — lesson 17 (chapter 17 of 20)

[← Chapter 16](#ch-16) · [Course chapter index](../SUBJECTS.md) · [Chapter 18 →](#ch-18)

Continue to the next authored lesson.
<!-- open-cyber-academy:chapter-navigation:end -->

## Worked answers

<a id="answer-ex063"></a>
**EX063.** No later run is in the file. The habit stays a habit. The portal stays next. The stored report does not change either print.
