mirror of
https://github.com/wshobson/agents.git
synced 2026-03-18 09:37:15 +00:00
style: format all files with prettier
This commit is contained in:
@@ -33,13 +33,13 @@ Corrective ────► Respond and recover from attacks
|
||||
|
||||
### 2. Control Layers
|
||||
|
||||
| Layer | Examples |
|
||||
|-------|----------|
|
||||
| **Network** | Firewall, WAF, DDoS protection |
|
||||
| **Application** | Input validation, authentication |
|
||||
| **Data** | Encryption, access controls |
|
||||
| **Endpoint** | EDR, patch management |
|
||||
| **Process** | Security training, incident response |
|
||||
| Layer | Examples |
|
||||
| --------------- | ------------------------------------ |
|
||||
| **Network** | Firewall, WAF, DDoS protection |
|
||||
| **Application** | Input validation, authentication |
|
||||
| **Data** | Encryption, access controls |
|
||||
| **Endpoint** | EDR, patch management |
|
||||
| **Process** | Security training, incident response |
|
||||
|
||||
### 3. Defense in Depth
|
||||
|
||||
@@ -725,6 +725,7 @@ class ControlTester:
|
||||
## Best Practices
|
||||
|
||||
### Do's
|
||||
|
||||
- **Map all threats** - No threat should be unmapped
|
||||
- **Layer controls** - Defense in depth is essential
|
||||
- **Mix control types** - Preventive, detective, corrective
|
||||
@@ -732,6 +733,7 @@ class ControlTester:
|
||||
- **Review regularly** - Controls degrade over time
|
||||
|
||||
### Don'ts
|
||||
|
||||
- **Don't rely on single controls** - Single points of failure
|
||||
- **Don't ignore cost** - ROI matters
|
||||
- **Don't skip testing** - Untested controls may fail
|
||||
|
||||
Reference in New Issue
Block a user