Security › Module 8 › Lesson 4
Lab — Controls
Control selection lab on `$ARCH_LAB` — control catalog, NIST mapping, tradeoff matrix bundled for LAB-ARCH-001.
Visual · t41_control_selection_lab
Lab: control selection pack on YOUR $ARCH_LAB LAB-ARCH-001. Original Cyberlium.
Opening
Ship control selection artifacts from YOUR lab org — catalog, NIST mapping, tradeoffs — zero forged coverage or stranger org control theft.
On YOUR `$ARCH_LAB` per brief: (1) scope proof — LAB-ARCH-001 and Module 7 enterprise pack labeled; (2) control catalog card Module 8-1; (3) NIST mapping table Module 8-2; (4) tradeoff matrix Module 8-3; (5) selection summary stub (control count, gap count, decision count honesty); (6) integrity — `$ARCH_LAB` only, LAB-ARCH-001 scope, no stranger org control theft, no forged NIST coverage, no skip-all-controls fraud; (7) chmod 600 pack. Cross-link Module 7 reference overlay — professional control selection handoff.
1. Lab deliverables
Catalog + NIST mapping + tradeoff matrix cross-indexed to LAB-ARCH-001.
Summary cites honest gap count — not zero-fiction NIST coverage.
Command guide
Try these commands — Lab deliverables
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
TOGAF — https://www.opengroup.org/togaf SABSA — https://sabsa.org/ NIST 800-160 — https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
export ARCH_LAB=${ARCH_LAB:-$HOME/cyberlium-lab/t41-arch}
export ARCH_ENTERPRISE=${ARCH_ENTERPRISE:-$ARCH_LAB/LAB-ARCH-001/enterprise}
cat > "$ARCH_ENTERPRISE/ea-alignment-stub.md" <<'EOF'
# EA Alignment Stub — LAB-ARCH-001
| EA artifact (fictional) | Security artifact | Status |
|-------------------------|-------------------|--------|
| Application catalog: Order API | container-diagram.md | linked |
| Data catalog: Customer PII | dfd-order-flow.md | linked |
| Technology standard: API GW | api-gateway-pattern.md | linked |
| Business attribute: Integrity | sabsa/attribute-trace-order-api.md | linked |
| Threat model: Customer portal | stride/worksheet-customer-portal.md | linked |
LAB SAMPLE — EA/security cross-reference literacy
EOFCommand — copy this
grep -E 'Order API|worksheet-customer|LAB SAMPLE' "$ARCH_ENTERPRISE/ea-alignment-stub.md" cat > "$ARCH_LAB/notes/enterprise-lab-summary.md" <<'EOF' # Enterprise Architecture Lab Summary — YOUR lab - togaf-named.txt + togaf-adm-phases.md: TOGAF literacy - security-in-ea.md: integration + governance touchpoints - ea-alignment-stub.md: cross-reference table ## Integrity - Fictional LAB-ARCH-001 — not a certified TOGAF deliverable set EOF
Command — copy this
grep -E 'ea-alignment|Integrity|TOGAF' "$ARCH_LAB/notes/enterprise-lab-summary.md" curl -sS https://www.opengroup.org/togaf | head -3
═══ WINDOWS ═══
Command — copy this
Get-Content $HOME/cyberlium-lab/t41-arch/LAB-ARCH-001/enterprise/ea-alignment-stub.md | Select-String LAB
Primary tools to practice this lesson: grep, curl. Reference sites: TOGAF (https://www.opengroup.org/togaf); SABSA (https://sabsa.org/); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Quality bar
Every control row LAB-labeled — not stranger org or prod control exports.
Tradeoff rationale documented — not silent accept-all-risk.
3. Teardown
Secure notes chmod 600; control selection pack ready for review module.
Archive stub optional per brief.
4. What you ship: control selection lab pack
Catalog + NIST mapping + tradeoffs + summary + integrity — chmod 600.
5. What you record before the next lesson
Control selection lab pack path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Control selection lab includes forged NIST compliance certificate as bonus deliverable.
Right
Control selection lab pack on `$ARCH_LAB` LAB-ARCH-001. Next: quiz.
Mission: control selection lab
1) Scope and Module 7 enterprise proof. 2) Control catalog and NIST mapping. 3) Tradeoff matrix with honest gaps. 4) Integrity block; chmod 600.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Selection summary — minimum honesty rows?”
Knowledge Check
APPLY: Control selection lab scope:
Multiple choice
Knowledge Check
APPLY: True or False: Forged NIST coverage earns control selection credit.
True or False
Knowledge Check
APPLY: Control selection pack should:
Multiple choice