Free practice · matching · medium

Practice

Match cloud risks to controls

Match each cloud risk to the control that most directly reduces it.

Cloud access lifecycle

Every shared link and connected app needs an owner and an end state

  1. PurposeName the approved collaboration need
  2. RecipientChoose specific people or groups
  3. PermissionGrant view or edit only as needed
  4. ExpirationSet an end date or review point
  5. ReviewInspect guests, apps, links, and owners
  6. RecoverUse approved version and backup paths

Specific recipients, least privilege, expiration, guest review, connected-app control, and recovery planning prevent access from becoming permanent by accident.

Match each item