OpenCyber AcademyLesson map
Lesson 14. Map, example, EX060.
flowchart TD
A["Notes agree an offline break-glass account"] --> B["Six-month plan still lists a tested procedure"]
B --> C{"Is a dated sign-in exercise in the file?"}
C -->|No| D["Keep the agreement and the plan line"]
C -->|Yes| E["That date would have to be written"]
Agreement is not a dated exercise. The credential is not written here.
Logical drawing
chapter 3 agreement
offline break-glass administrator account
a sign-in procedure if the identity provider fails
chapter 4 plan, still listed
tested break-glass procedure
not in the file
a date
a password
a result of an exercise this month
Learning outcomes
After this chapter, you should be able to:
- Keep the agreement for an offline break-glass account.
- Keep the procedure on the six-month plan.
- Refuse a dated exercise the file does not contain, and write no credential.
14.1 The account is agreed. The exercise is not dated.
For the identity provider, Leah and her manager agree a break-glass administrator account stored securely offline, and a procedure for signing in if that provider fails. The six-month plan, which the manager approves, still lists a tested break-glass procedure. A classmate picks a calendar day, writes that the sign-in was exercised, and asks for the credential to be copied into the note. The book shows the agreement and the plan line. It does not show a date or a result for that exercise. Leah writes no password. She does not cross the plan line off.
14.2 Worked example
Lesson table; scroll horizontally to read all columns →
| Note someone wants | File | Decision |
|---|---|---|
| "An offline break-glass account was agreed." | Chapter 3 | May stay |
| "The plan still lists a tested procedure." | Chapter 4 | May stay |
| "It was exercised on a chosen day." | No date | Refuse |
| "Copy the credential." | Not in the book | Refuse |
Synthetic case. No secret is created or stored in this lesson.
Errors and limits
Refusing a date does not cancel the agreement. It keeps the plan item open until a record of the exercise exists.
Apply
- EX060 — What was exercised? The notes agree an offline break-glass account and a sign-in procedure. The approved plan still lists a tested break-glass procedure. A classmate dates the exercise and asks for the credential. What stands, and what do you not write?
Show marking criteria
Rubric: 3 = the agreement stays; the plan line stays; no dated exercise is in the file; do not write a credential;; 2 = agreement is not a dated exercise;; 1 = one of those;; 0 = none.