{"id":108,"date":"2017-01-28T21:50:10","date_gmt":"2017-01-28T21:50:10","guid":{"rendered":"https:\/\/www.cia-cubed.org\/secco\/?p=108"},"modified":"2017-02-07T22:02:04","modified_gmt":"2017-02-07T22:02:04","slug":"what-control-activities-to-verify","status":"publish","type":"post","link":"https:\/\/www.cia-cubed.org\/secco\/2017\/01\/28\/what-control-activities-to-verify\/","title":{"rendered":"What control activities to verify?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">During the validation\u00a0of control activities you should attempt to make security easier on users and more difficult for attackers.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Activities to verify may include (not limited to):<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"><strong>Prevention<\/strong> (2FA, least privilege, reduce deniability, &#8230;)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"><strong>Delay<\/strong> (strong encryption, layering, &#8230;)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"><strong>Detect<\/strong> (monitor, detect change, audit, automate, &#8230;)<\/span><\/li>\n<li style=\"font-weight: 400;\"><strong>Compliance<\/strong> (implementation of corporate policy and standards, including configuration best practices)<\/li>\n<li style=\"font-weight: 400;\"><strong>Recover<\/strong> (verify the ability to reset to the last known good state)<\/li>\n<\/ul>\n<p><em><span style=\"font-weight: 400;\">NOTE: validation of control activities is not considered an audit. Auditors should also be evaluated by watching the watcher &amp; comply with segregation of duties. Example: auditors should NOT define the governing policy or have the ability to implement change.<\/span><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>During the validation\u00a0of control activities you should attempt to make security easier on users and more difficult for attackers.\u00a0 Activities to verify may include (not limited to): Prevention (2FA, least privilege, reduce deniability, &#8230;) Delay (strong encryption, layering, &#8230;) Detect (monitor, detect change, audit, automate, &#8230;) Compliance (implementation of corporate policy and standards, including configuration &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.cia-cubed.org\/secco\/2017\/01\/28\/what-control-activities-to-verify\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;What control activities to verify?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[8],"class_list":["post-108","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-tip"],"_links":{"self":[{"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/posts\/108","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/comments?post=108"}],"version-history":[{"count":1,"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/posts\/108\/revisions"}],"predecessor-version":[{"id":109,"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/posts\/108\/revisions\/109"}],"wp:attachment":[{"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/media?parent=108"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/categories?post=108"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cia-cubed.org\/secco\/wp-json\/wp\/v2\/tags?post=108"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}