Write findings from test results

Objectives

Write two bounded findings with requirement, condition, evidence, risk and grade. Include policy version, deadline, tested denominator and actual durations. Do not invent root cause or incidents.

IAM-04 v3: privileged removal within 24 hours. Test: 8 privileged departures, 2 late: 72 hours (EV-17) and 96 hours (EV-18). REC-02 v2: recovery within 4 hours, quarterly exercises. Four exercises performed; DR-04 took 6 hours (EV-24), other three met target. No evidence of misuse or systemic absence. Grade rule: major means absent or systemically ineffective process; minor means bounded lapse. Risks: continued privileged access after departure; prolonged service unavailability. Use F-01 for access and F-02 for recovery in that order. The owner asks for observations instead.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

1. Step 1

   Write a bounded access-removal finding

   Link the applicable access deadline to observed durations, denominator and source records. Describe exposure without alleging theft.

   Write a bounded access-removal finding

2. Step 2

   Write a distinct recovery-target finding

   Separate exercise performance from meeting its target and apply the agreed grading threshold.

   Write a distinct recovery-target finding

Rules summary

• XP on pass

  40 bonus XP the first time every check goes green.

• Paid hints

  1 available. Each costs 25% of the lab XP (about 10 XP).

• Reveal solution

  Scores 0 XP and unlocks only after 3 check runs.

• Attempt cap

  60 check runs per learner. The runner warns you in the last 10.

• Drafts

  Your editor content is saved in this browser, so a reload will not lose work.

• Walkthrough

  Always free and never penalised: use it before spending a hint.