OpenCyber Academy
Rapid course · Lesson 10 · English
Course code: OCA-009Lesson 10: OCA-009-A010

Role changes and pauses are still unmonitored

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 10. Map, example, EX056.

flowchart TD
  A["Monitoring row is unmet"] --> B["Daily reconciliation is already met"]
  B --> C["Elena adds a monthly check"]
  C --> D{"Is that monthly check the monitor?"}
  D -->|No| E["The monitoring gap stays"]

A check she plans to do is not a watch the source already records.

Logical drawing

already met
    daily reconciliation of points issued against purchases
unmet
    monitoring of role changes and pauses
added in the decision
    a monthly comparison and a look at privileged events
not shown
    the monitor already running

Learning outcomes

After this chapter, you should be able to:

  1. Say what the monitoring row covers.
  2. Keep it apart from the daily reconciliation and from the monthly check.
  3. Refuse to mark monitoring on.

10.1 Three different looks at the scheme.

Monitoring, in this checklist, means a watch that notices when a privileged role changes or when the scheme is paused. The source marks that row unmet, and the print lists the gap as monitoring of role changes and pauses. Two other habits are easy to confuse with it. The daily reconciliation of points issued against purchases is already marked met. That pass only tallies awards against till receipts, so it cannot stand in for a pause alarm. Elena also adds a monthly check: compare points issued with purchases and review any privileged events. That sentence is her plan for the pilot, written in chapter 4. A plan to look once a month is not a monitor the source already scores as present. If a note says the monitoring row now passes because the monthly check was added, it has moved a decision into the lab output. The output was scored from the booleans, and the monitoring boolean is still unmet. The vendor's promise to fix the gap stays a promise. It does not switch the watch on inside this file.

10.2 Worked example

Name the habit before you say whether the file already has it.

Lesson table; scroll horizontally to read all columns →

Habit Status in this file Decision
Daily reconciliation Met in the source Leave the pass
Monitoring of role changes and pauses Gap in the print Leave the gap
Monthly comparison and privileged-event review Elena's added plan A plan, not the monitor
"Monitoring is therefore on." Not in the source Refuse

Synthetic case. No live alert channel is described. The monthly check is a sentence in the decision, not a screen in the lab.

Errors and limits

Planning a look is useful and still future. The gap line is the evidence about today.

Apply

Worked answers

EX056. No. Role changes and pauses stay unmonitored. The added monthly check is not that monitor already running.