Security › Module 8 › Lesson 4
Lab — Controls
Control selection lab on `$ARCH_LAB` — control catalog, NIST mapping, tradeoff matrix bundled for LAB-ARCH-001.
Visual · t41_control_selection_lab
Lab: control selection pack on YOUR $ARCH_LAB LAB-ARCH-001. Original Cyberlium.
Opening
Ship control selection artifacts from YOUR lab org — catalog, NIST mapping, tradeoffs — zero forged coverage or stranger org control theft.
On YOUR `$ARCH_LAB` per brief: (1) scope proof — LAB-ARCH-001 and Module 7 enterprise pack labeled; (2) control catalog card Module 8-1; (3) NIST mapping table Module 8-2; (4) tradeoff matrix Module 8-3; (5) selection summary stub (control count, gap count, decision count honesty); (6) integrity — `$ARCH_LAB` only, LAB-ARCH-001 scope, no stranger org control theft, no forged NIST coverage, no skip-all-controls fraud; (7) chmod 600 pack. Cross-link Module 7 reference overlay — professional control selection handoff.
1. Lab deliverables
Catalog + NIST mapping + tradeoff matrix cross-indexed to LAB-ARCH-001.
Summary cites honest gap count — not zero-fiction NIST coverage.
Command guide
Try these commands — Lab deliverables
═══ LINUX / macOS (Terminal Practice) ═══
Check system state and user context
Command — copy this
id whoami uname -a
Inspect network sockets listening for connections
Command — copy this
ss -tuln 2>/dev/null || netstat -tuln
Audit active processes
Command — copy this
ps aux | grep -v "\[" | head -15
═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information
Command — copy this
whoami /all Get-ComputerInfo | Select-Object CsName, OsName, OsVersion
Primary tools to practice this lesson: grep, curl. Reference sites: TOGAF (https://www.opengroup.org/togaf); SABSA (https://sabsa.org/); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Quality bar
Every control row LAB-labeled — not stranger org or prod control exports.
Tradeoff rationale documented — not silent accept-all-risk.
3. Teardown
Secure notes chmod 600; control selection pack ready for review module.
Archive stub optional per brief.
4. What you ship: control selection lab pack
Catalog + NIST mapping + tradeoffs + summary + integrity — chmod 600.
5. What you record before the next lesson
Control selection lab pack path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Control selection lab includes forged NIST compliance certificate as bonus deliverable.
Right
Control selection lab pack on `$ARCH_LAB` LAB-ARCH-001. Next: quiz.
Mission: control selection lab
1) Scope and Module 7 enterprise proof. 2) Control catalog and NIST mapping. 3) Tradeoff matrix with honest gaps. 4) Integrity block; chmod 600.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Selection summary — minimum honesty rows?”
Knowledge Check
APPLY: Control selection lab scope:
Multiple choice
Knowledge Check
APPLY: True or False: Forged NIST coverage earns control selection credit.
True or False
Knowledge Check
APPLY: Control selection pack should:
Multiple choice