Rank five mitigations and pick two different ones

short · 50 min · Objective 4.2

Task

For one real finding in your lab, produce the full mitigation ladder, then pick the right answer for 'most effective' and the right answer for 'immediately' -- which are different rows.

Steps

  1. Write lab/mitigation-ladder.csv with header rank,option,type,effort,residual,defeated_by and fill all five levels: eliminate, fix the cause, reduce exposure, block the symptom, detect and respond.
  2. For each, state what DEFEATS it -- a variant, a code path, another exposure route -- which is what makes the ladder honest.
  3. Choose and implement the 'immediately' answer -- usually exposure reduction -- and capture the refusal proving it took effect.
  4. Plan the 'most effective' answer with an owner and a date, and record the interim residual risk in lab/risk-register.csv.
  5. Write lab/layering.csv for the same asset with header layer,control,defeated_by covering at least six layers, and identify any two layers defeated by the SAME compromise.

Verify

awk -F, 'NR>1 {n++} END {print n" ladder row(s)"}' lab/mitigation-ladder.csv
awk -F, 'NR>1 && $6=="" {n++} END {print n+0" with no defeat condition"}' lab/mitigation-ladder.csv
awk -F, 'NR>1 {n++} END {print n" layer(s)"}' lab/layering.csv
awk -F, 'NR>1 {print $3}' lab/layering.csv | sort | uniq -c | awk '$1>1'

Five ladder rows with a defeat condition on each, six or more layers, and any correlated failures surfaced by the last command. Two layers defeated by the same thing are one layer with the cost of two.

This is an independent study companion for CompTIA SecurityX CAS-005 and is not produced by or endorsed by CompTIA.