All The player of CoA-playbooks should log the execution of the actions as well as the result of the action automatically. The log should be cryptography protected so that we take care of Non-repudiation and Accountability. The playbook it self should be cryptography protected for Integrity. The execution of the playbook should take into account Authentication and Authorization. The log should be useful to (dry) replay the action for audit and validation. Frans Schippers Cyber Security Lecturer / Researcher Amsterdam Universe of Applied Science HBO-ICT Wibautstraat 2-4 1091 GM Amsterdam PGP: 12D1 D930 488C 22B7 6AFF BFF7 218C 865E D6E0 6B48
Attachment:
signature.asc
Description: Message signed with OpenPGP
