Zero › Module 10 › Lesson 1
Checklist
Topic 40 capstone checklist — all pillar packs, ethics, NIST citation, diagrams — master checklist on YOUR $ZT_LAB.
Visual · t40_checklist
Capstone checklist. $ZT_LAB. Original Cyberlium.
Opening
Capstone checklist is your grade sheet — verify every pillar pack, diagram, and ethics file before Topic 41 Security Architecture.
Checklist rows: lab.env + LAB-ZT-001 pillars, roe + no-attack-tools, principles pack, identity/device/network/data/policy/roadmap packs, NIST SP 800-207 cited, architecture diagrams present, LAB SAMPLE labels, zero attack tool refs. Write capstone-checklist.txt with checkbox rows. Next: Lab Path.
1. Pillar pack rows
Identity, device, microseg/network, data, policy, roadmap packs exist under LAB-ZT-001 with chmod 600.
Each pack cross-links at least two other pillars in diagram or text.
Command guide
Try these commands — Pillar pack rows
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NIST SP 800-207 — https://csrc.nist.gov/publications/detail/sp/800-207/final CISA ZTMM — https://www.cisa.gov/zero-trust-maturity-model
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export ZT_LAB=${ZT_LAB:-$HOME/cyberlium-lab/t40-zt}
cat > "$ZT_LAB/notes/capstone-checklist.txt" <<'EOF'
[ ] lab.env + LAB-ZT-001/ identity devices network data policy roadmap
[ ] roe.txt + no-attack-tools.txt reviewed
[ ] Principles: NIST 800-207 + verify explicitly + least privilege
[ ] Identity pack: CA matrix + PAM checklist
[ ] Device pack: posture matrix + MDM/EDR + hygiene
[ ] Network pack: microseg + ZTNA/SASE + VPN comparison
[ ] Data pack: classification + app wrapping + DLP stub
[ ] Policy pack: PEP/PDP master diagram linking all pillars
[ ] Roadmap pack: Gantt + maturity + KPI stubs
[ ] Architecture diagrams: microseg tiers, ZTNA path, PEP/PDP, data flow
[ ] NIST SP 800-207 curl cited in notes
[ ] never: attack tools / lateral movement / unauthorized scanning
EOFCommand — copy this
grep '\[ \]' "$ZT_LAB/notes/capstone-checklist.txt"
python3 -c "print('Capstone: ZT — YOUR t40-zt lab fictional LAB-ZT-001 only')"Primary tools to practice this lesson: grep, python3. Reference sites: NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final); CISA ZTMM (https://www.cisa.gov/zero-trust-maturity-model). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Ethics and labels
roe.txt, no-attack-tools, LAB SAMPLE on all artifacts, no employer imports, no real PII.
Grep NEVER attack across notes — must hit ethics files.
3. Architecture artifacts
Minimum: PEP/PDP master diagram, microseg tier diagram, ZTNA path diagram, data flow diagram.
Ship: capstone checklist with checkbox rows. Next: Lab Path.
4. What you ship: capstone checklist
Checkbox rows for all pillars, ethics, diagrams, NIST cite. $ZT_LAB. chmod 600.
5. What you record before the next lesson
Date. Checklist path. $ZT_LAB named. File t40-m10-l01-checklist.txt chmod 600.
6. Wrong vs right: bypass cookbooks vs YOUR ZT design
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Checklist all checked without opening packs. Skip LAB SAMPLE label row.
Right
Write capstone checklist with honest unchecked rows where gaps remain. Next: Lab Path.
Mission: capstone checklist
1) List all pillar pack paths. 2) Ethics + diagram rows. 3) Mark checked only if file exists. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Unchecked rows are OK — document gap for roadmap honesty.
Knowledge Check
APPLY: Capstone checklist verifies:
Multiple choice
Knowledge Check
APPLY: True or False: LAB SAMPLE label required on artifacts.
True or False
Knowledge Check
APPLY: Unchecked checklist row means:
Multiple choice