Lab — Personal Security Self-Audit

Work on devices and accounts you own or administer for yourself. For each checklist line, mark Y (Yes — true today), P (Partial — started but incomplete), or N (No). Spend about 25–40 minutes in one sitting if you can. Do not inflate scores for vibes. Do not mark Yes on backups without a restore test. Do not mark Yes on MFA if email still lacks it.

Write results to $HOME/cyberlium-lab/topic01-self-audit.txt and chmod 600 so a shared laptop account does not casually read your gaps. On native Windows without chmod, create the file under your user profile (or WSL path) and restrict ACLs if you know how; in macOS/Linux/WSL, chmod 600 is required for the mission. Never commit the file to a public git repo. Never collect other people's audit files to "average the class."

Screen lock: strong credential (not 1234/birthday), auto-lock ≤ 1–2 minutes, sensitive notification previews hidden. Unique passwords / manager: email and banking passwords are unique; a manager is ideal. MFA: on email and money apps; prefer authenticator/security key over SMS when offered. Updates: OS, browser, and critical apps auto-update or checked within a week. Backups: second copy AND off-site/cloud in 3-2-1 spirit, plus a successful test restore. Permissions: Location/Mic/Camera audited recently with excess revoked. Browser privacy: third-party cookies blocked or strict tracking protection on. Public Wi-Fi rule: no banking on open Wi-Fi without cellular/VPN; auto-join controlled. Phishing pause: preview links; no passwords from unexpected email/SMS. IR first-five: disconnect → clean-device resets → notify bank/IT → restore from clean backup. Physical/FDE: lock reflex + disk encryption status known. AI-scam ritual: hang up → delay → call-back on saved number / code word for urgent money.

Create the directory if earlier labs did not. Fill every line. Empty files fail the mission. After editing scores, re-run chmod 600. Optionally add a 30-day revisit date. Defensive self-audit only — no scanning other people, no café Wi-Fi attacks, no doxxing, no stalkerware to "verify permissions."

mkdir -p "$HOME/cyberlium-lab"
NOTES="$HOME/cyberlium-lab/topic01-self-audit.txt"

{
  echo "date: $(date -Iseconds 2>/dev/null || date /t)"
  echo "lesson: topic_01_m07_l05_personal_security_self_audit"
  echo ""
  echo "screen_lock_strong_short_autolock: N"
  echo "unique_email_password_or_manager: N"
  echo "mfa_email: N"
  echo "mfa_banking_payments: N"
  echo "os_updated_or_autoupdate: N"
  echo "browser_updated: N"
  echo "backup_second_copy_exists: N"
  echo "backup_offsite_or_cloud_exists: N"
  echo "backup_test_restore_ok: N"
  echo "location_permissions_audited: N"
  echo "mic_camera_permissions_audited: N"
  echo "browser_third_party_cookies_or_strict_tracking: N"
  echo "public_wifi_banking_rule_written: N"
  echo "wifi_autojoin_controlled: N"
  echo "phishing_no_password_via_unexpected_links: N"
  echo "ir_card_disconnect_clean_reset_notify: N"
  echo "disk_encryption_status_checked: N"
  echo "ai_scam_callback_or_codeword_ritual: N"
  echo ""
  echo "top_gap_1: "
  echo "top_gap_1_action_this_week: "
  echo "top_gap_2: "
  echo "top_gap_2_action_this_week: "
  echo "top_gap_3: "
  echo "top_gap_3_action_this_week: "
  echo "revisit_date_30_days: "
  echo "scope: myself only — no other people's phones, profiles, or networks"
} > "$NOTES"

chmod 600 "$NOTES"
ls -l "$NOTES"

whoami
id 2>/dev/null || true
uname -a 2>/dev/null || true
mkdir -p "$HOME/cyberlium-lab"
ls -l "$HOME/cyberlium-lab/topic01-self-audit.txt" 2>/dev/null || ls -la "$HOME/cyberlium-lab"

whoami
New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\cyberlium-lab" | Out-Null
Set-Location "$env:USERPROFILE\cyberlium-lab"

date: $(Get-Date -Format o)

Get-ChildItem topic01-self-audit.txt

You now have a living, private security baseline for Topic 1 — scored honestly, stored under mode 600, scoped to you alone. Next — Quiz: Cybersecurity Fundamentals Final — proves Topic 1 end-to-end: CIA through everyday defenses and IR thinking.