8 — Compliance
Purpose
[stub: compliance]
Metadata
| Author | Amit Singh |
| Scope | sre |
Local graph
Related notes
1 — Identity and Access Management
Who can do what, to which system, and how that access is granted, reviewed, and revoked — the control plane every other security chapter in this Part depends on.
10 — Business Continuity
The organizational plan for keeping the business running through a disaster, of which technical disaster recovery is only one component.
2 — Secrets Management
Why a secret hardcoded in a config file or env var is a standing incident waiting for a git history search, and the vault-backed rotation that closes that gap.
3 — Zero Trust
Verifying every request regardless of network origin, on the assumption the perimeter is already compromised — and what that means for how services actually authenticate to each other.