Free practice · matching · medium
Practice
Match account risks to controls
Match each account risk to the control that directly reduces it.
Account protection lifecycle
Secure access continues after a password is created
- OwnerUse an individual approved account
- AccessGrant only the current work need
- CredentialStore a unique secret safely
- MFAApprove only an expected sign-in
- RecoveryProtect recovery routes and sessions
- ReviewAct on changes, alerts, and departures
Identity, least privilege, unique credentials, MFA, protected recovery, and alert review work as one account-control system.