Checklist

Topic 40 capstone checklist — all pillar packs, ethics, NIST citation, diagrams — master checklist on YOUR $ZT_LAB.

Checklist• Audio Walkthrough

00:00/02:39

Visual · t40_checklist

Capstone checklist. $ZT_LAB. Original Cyberlium.

Capstone checklist is your grade sheet — verify every pillar pack, diagram, and ethics file before Topic 41 Security Architecture.

Checklist rows: lab.env + LAB-ZT-001 pillars, roe + no-attack-tools, principles pack, identity/device/network/data/policy/roadmap packs, NIST SP 800-207 cited, architecture diagrams present, LAB SAMPLE labels, zero attack tool refs. Write capstone-checklist.txt with checkbox rows. Next: Lab Path.

1. Pillar pack rows

Identity, device, microseg/network, data, policy, roadmap packs exist under LAB-ZT-001 with chmod 600.

Each pack cross-links at least two other pillars in diagram or text.

Command guide

Try these commands — Pillar pack rows

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

NIST SP 800-207 — https://csrc.nist.gov/publications/detail/sp/800-207/final CISA ZTMM — https://www.cisa.gov/zero-trust-maturity-model

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install python3

macOS:

Command — copy this

brew install python3

Windows: Download https://python.org/downloads/

═══ LINUX / macOS ═══

Command — copy this

export ZT_LAB=${ZT_LAB:-$HOME/cyberlium-lab/t40-zt}
cat > "$ZT_LAB/notes/capstone-checklist.txt" <<'EOF'
[ ] lab.env + LAB-ZT-001/ identity devices network data policy roadmap
[ ] roe.txt + no-attack-tools.txt reviewed
[ ] Principles: NIST 800-207 + verify explicitly + least privilege
[ ] Identity pack: CA matrix + PAM checklist
[ ] Device pack: posture matrix + MDM/EDR + hygiene
[ ] Network pack: microseg + ZTNA/SASE + VPN comparison
[ ] Data pack: classification + app wrapping + DLP stub
[ ] Policy pack: PEP/PDP master diagram linking all pillars
[ ] Roadmap pack: Gantt + maturity + KPI stubs
[ ] Architecture diagrams: microseg tiers, ZTNA path, PEP/PDP, data flow
[ ] NIST SP 800-207 curl cited in notes
[ ] never: attack tools / lateral movement / unauthorized scanning
EOF

Command — copy this

grep '\[ \]' "$ZT_LAB/notes/capstone-checklist.txt"
python3 -c "print('Capstone: ZT — YOUR t40-zt lab fictional LAB-ZT-001 only')"

Primary tools to practice this lesson: grep, python3. Reference sites: NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final); CISA ZTMM (https://www.cisa.gov/zero-trust-maturity-model). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Ethics and labels

roe.txt, no-attack-tools, LAB SAMPLE on all artifacts, no employer imports, no real PII.

Grep NEVER attack across notes — must hit ethics files.

3. Architecture artifacts

Minimum: PEP/PDP master diagram, microseg tier diagram, ZTNA path diagram, data flow diagram.

Ship: capstone checklist with checkbox rows. Next: Lab Path.

4. What you ship: capstone checklist

Checkbox rows for all pillars, ethics, diagrams, NIST cite. $ZT_LAB. chmod 600.

5. What you record before the next lesson

Date. Checklist path. $ZT_LAB named. File t40-m10-l01-checklist.txt chmod 600.

6. Wrong vs right: bypass cookbooks vs YOUR ZT design

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: Checklist all checked without opening packs. Skip LAB SAMPLE label row.
Right: Write capstone checklist with honest unchecked rows where gaps remain. Next: Lab Path.

Hands-on Exercise