10 — Business Continuity
Purpose
[stub: business-continuity]
Metadata
| Author | Amit Singh |
| Scope | sre |
Local graph
Related notes
1 — Identity and Access Management
Who can do what, to which system, and how that access is granted, reviewed, and revoked — the control plane every other security chapter in this Part depends on.
2 — Secrets Management
Why a secret hardcoded in a config file or env var is a standing incident waiting for a git history search, and the vault-backed rotation that closes that gap.
3 — Zero Trust
Verifying every request regardless of network origin, on the assumption the perimeter is already compromised — and what that means for how services actually authenticate to each other.
4 — Network Security
Segmentation, firewalling, and the assumption that lateral movement is possible the moment any single node is compromised.