Security › Module 10 › Lesson 1
Checklist
Topic 41 capstone checklist — arch mindset, defense in depth, security by design, STRIDE, patterns, SABSA, enterprise reference, control selection, review/docs on `$ARCH_LAB` LAB-ARCH-001.
Visual · t41_capstone_checklist
Checklist consolidates architecture literacy pillars. $ARCH_LAB LAB-ARCH-001 only. Original Cyberlium.
Opening
Capstone proves security architecture literacy on YOUR authorized `$ARCH_LAB` LAB-ARCH-001 fictional org — not stranger org reviews or offensive architecture cookbooks.
Assemble checklist covering Modules 1–9: arch mindset and lab scope, defense in depth, security by design, STRIDE threat modeling, architecture patterns, SABSA literacy, enterprise reference, control selection, review and documentation. Use on capstone walk of YOUR `$ARCH_LAB` LAB-ARCH-001 — never stranger org architecture theft, never offensive attack design, never presenting lab as live employer architecture without authorization. Each row links artifact or honest N/A labeled LAB. Notes chmod 600 under $HOME/cyberlium-lab/t41-arch/. Integrity rows: `$ARCH_LAB` only, LAB-ARCH-001 scope, LAB samples labeled LAB, no offensive content, defensive architecture only, limitations documented.
1. Scope and ethics
$ARCH_LAB LAB-ARCH-001 named with fictional org template reference. NEVER stranger org reviews, NEVER offensive architecture, NEVER lab-as-live-employer fraud.
All design samples labeled LAB — mandatory on every architecture artifact row.
Command guide
Try these commands — Scope and ethics
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
OWASP ASVS — https://owasp.org/www-project-application-security-verification-standard/ Microsoft SDL — https://www.microsoft.com/en-us/securityengineering/sdl/ NIST 800-160 — https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export ARCH_LAB=${ARCH_LAB:-$HOME/cyberlium-lab/t41-arch}
cat > "$ARCH_LAB/notes/capstone-checklist.txt" <<'EOF'
[ ] lab.env + LAB-ARCH-001/ defense security-design stride patterns sabsa enterprise controls review
[ ] roe.txt + defensive-only.txt reviewed
[ ] Fundamentals: CIA + trust boundaries + defense-in-depth layers
[ ] Design: secure-by-design checklist + zero-trust literacy
[ ] STRIDE: worksheet-template + customer-portal + admin-console
[ ] Diagrams: context + container + dfd-order-flow
[ ] Patterns: api-gateway + microservices + pattern catalog
[ ] SABSA: attribute-stub + attribute trace
[ ] Enterprise: ea-alignment-stub + TOGAF phase literacy
[ ] Controls: control-selection-table + ASVS mapping
[ ] never: offensive attack cookbooks / unauthorized bypass how-tos
EOFCommand — copy this
grep '\[ \]' "$ARCH_LAB/notes/capstone-checklist.txt"
python3 -c "print('Capstone: Security Architecture — YOUR t41-arch lab fictional LAB-ARCH-001 only')"Primary tools to practice this lesson: grep, python3. Reference sites: OWASP ASVS (https://owasp.org/www-project-application-security-verification-standard/); Microsoft SDL (https://www.microsoft.com/en-us/securityengineering/sdl/); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Literacy pillars
Defense in depth, SBD, STRIDE, patterns, SABSA, enterprise reference, control selection, review/docs — linked rows.
Cross-link Topic 37 GRC as downstream compliance context — separate authorized track.
3. Teardown
Notes secured chmod 600, evidence pack ready, lab templates archived per brief.
Retention note for mentor handoff.
4. What you ship: Topic 41 capstone checklist
One-page architecture literacy capstone checklist for $ARCH_LAB LAB-ARCH-001.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Checklist includes row 'offensive attack architecture for capstone bonus.'
Right
Checklist written. Next: Lab Path.
Mission: write capstone checklist
1) Ethics/scope section. 2) Modules 1–9 pillar rows. 3) Teardown and handoff section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
Knowledge Check
APPLY: Checklist includes:
Multiple choice
Knowledge Check
APPLY: True or False: Offensive architecture required for capstone.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice