Re: [cacao] RE: How best to do multiple actions (integrated security)

[Frans Schippers <f.h.schippers@hva.nl>]

All

The player of CoA-playbooks should log the execution of the actions as well as the result of the action automatically.
The log should be cryptography protected so that we take care of Non-repudiation and Accountability.
The playbook it self should be cryptography protected for Integrity.
The execution of the playbook should take into account Authentication and Authorization.
The log should be useful to (dry) replay the action for audit and validation.

Frans Schippers
Cyber Security
Lecturer / Researcher

Amsterdam Universe of Applied Science
HBO-ICT
Wibautstraat 2-4
1091 GM Amsterdam

PGP: 12D1 D930 488C 22B7 6AFF  BFF7 218C 865E D6E0 6B48

Attachment: signature.asc
Description: Message signed with OpenPGP