Write a RACI that survives a containment decision

short · 40 min · Objective 1.2

Task

Build a RACI for the DECISIONS an incident forces, not for the tasks, and prove that exactly one party is accountable for each.

Steps

  1. Create lab/raci.csv with header activity,responsible,accountable,consulted,informed.
  2. Include at least six DECISIONS rather than tasks: declare an incident, authorise containment causing an outage, disable a shared service account, approve external communication, notify a regulator, decide to stop recovery attempts.
  3. Use role names throughout. A personal name anywhere in the file is a failure of this lab.
  4. Add a deputy column naming a deputy for every accountable role.
  5. Write lab/raci-check.sh that exits non-zero if any row has other than exactly one accountable entry, or an empty deputy.

Verify

awk -F, 'NR>1 {n++} END {print n" activity row(s)"}' lab/raci.csv
awk -F, 'NR>1 {print $3}' lab/raci.csv | grep -c ';'
sh lab/raci-check.sh; echo "raci check exit=$?"

Six or more rows, ZERO accountable cells containing a separator (which would mean two accountable parties), and the check exiting 0. Then deliberately add a second accountable role to one row and confirm the check goes non-zero -- a check you have not seen fail is not a check.

This is an independent study companion for CompTIA SecurityX CAS-005 and is not produced by or endorsed by CompTIA.