GRC › Module 8 › Lesson 4
Lab — Gap
Gap and evidence lab on `$GRC_LAB` — gap register, evidence index, anti-fraud ethics card bundled.
Visual · t37_gap_lab
Lab: gap/evidence pack on YOUR $GRC_LAB LAB samples. Original Cyberlium.
Opening
Ship gap and evidence artifacts from YOUR lab — honest gaps, LAB-labeled samples, zero forged artifacts.
On YOUR `$GRC_LAB` per brief: (1) scope proof — Module 7 audit pack labeled; (2) gap register Module 8-1; (3) evidence index Module 8-2 all LAB-labeled; (4) anti-fraud ethics card Module 8-3; (5) gap/evidence summary stub (open gap count, evidence sample count, zero forged scan); (6) integrity — `$GRC_LAB` only, LAB labels mandatory, no forged artifacts, no stranger org data; (7) chmod 600 pack. Scan pack for forged certificates, backdated logs, synthetic auditor letters — must be zero.
1. Lab deliverables
Gap register + evidence index + anti-fraud card cross-indexed.
Every evidence row LAB-labeled with UTC — gap/evidence discipline.
Command guide
Try these commands — Lab deliverables
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NIST CSF — https://www.nist.gov/cyberframework ISO 27001 — https://www.iso.org/isoiec-27001-information-security.html CIS Controls — https://www.cisecurity.org/controls
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export GRC_LAB=${GRC_LAB:-$HOME/cyberlium-lab/t37-grc}
export GRC_GAP=${GRC_GAP:-$GRC_LAB/LAB-ORG-001/gap}
cat > "$GRC_GAP/gap-analysis-stub.csv" <<'EOF'
gap_id,framework_ref,requirement,current_state,gap,severity,owner,target_date,status
G-001,PR.AC-1,MFA all privileged,Partial — 2/5 admins,MFA not enforced on 2 accounts,High,IT Sec,2026-09-15,open
G-002,A.8.15,Security logging,SIEM deployed; retention 30d,Below 90-day standard,Med,SOC,2026-09-30,open
G-003,PCI-3.4,PAN masking in logs,Policy exists,Engineering not verified,Med,Platform,2026-10-01,open
G-004,CIS 6.5,Access reviews quarterly,Ad hoc only,No scheduled recert,Med,IT Sec,2026-09-20,open
G-005,GV.OC-1,Governance policy set,Policies draft,Board not approved,Low,GRC,2026-11-01,open
EOFCommand — copy this
grep -E 'G-00[1-5]|gap_id|Partial' "$GRC_GAP/gap-analysis-stub.csv" cat > "$GRC_LAB/notes/gap-lab-summary.md" <<'EOF' # Gap Analysis Lab Summary — YOUR lab - gap-analysis-stub.csv: fictional gaps mapped to frameworks - evidence-inventory.csv: LAB SAMPLE evidence rows - no-forged-artifacts.txt: hard ban on fake certs/SOC2 - evidence-hygiene.md: collection + labeling rules ## Integrity - All artifacts labeled LAB SAMPLE — NOT FOR PRODUCTION AUDIT CLAIMS EOF
Command — copy this
grep -E 'gap-analysis|LAB SAMPLE|Integrity' "$GRC_LAB/notes/gap-lab-summary.md" wc -l "$GRC_GAP/gap-analysis-stub.csv" "$GRC_EVIDENCE/evidence-inventory.csv"
═══ WINDOWS ═══
Command — copy this
Get-Content $HOME/cyberlium-lab/t37-grc/LAB-ORG-001/gap/gap-analysis-stub.csv | Select-String G-001 Get-Content $HOME/cyberlium-lab/t37-grc/LAB-ORG-001/evidence/evidence-inventory.csv | Select-String LAB
Primary tools to practice this lesson: grep, python3. Reference sites: NIST CSF (https://www.nist.gov/cyberframework); ISO 27001 (https://www.iso.org/isoiec-27001-information-security.html); CIS Controls (https://www.cisecurity.org/controls). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Quality bar
Honest open gap count — not zero-fiction clean slate.
Zero forged artifact files in pack — scan before seal.
3. Teardown
Secure notes chmod 600; gap pack ready for reporting module.
Archive stub optional per brief.
4. What you ship: gap lab pack
Gap register + evidence index LAB + anti-fraud card + summary + integrity — chmod 600.
5. What you record before the next lesson
Gap lab pack path.
6. Wrong vs right: fraudulent certs vs YOUR lab templates
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Gap lab includes forged SOC 2 report as 'sample evidence' deliverable.
Right
Gap lab pack on `$GRC_LAB` LAB samples. Next: quiz.
Mission: gap lab
1) Scope and Module 7 audit proof. 2) Gap register and evidence index LAB-labeled. 3) Anti-fraud card and zero-forged scan. 4) Integrity block; chmod 600.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Zero-forged scan — what to grep?”
Knowledge Check
APPLY: Gap lab scope:
Multiple choice
Knowledge Check
APPLY: True or False: Forged SOC reports earn gap lab credit.
True or False
Knowledge Check
APPLY: Gap lab pack should:
Multiple choice