ZAF / BOOK VII
Security Handbook
Practical security responsibilities, controls, evidence and response playbooks.
This book is planned. The entries below define its intended scope; no accepted standard text is published here.
Proposed contents for sequential development.
01 · Security Governance & Responsibilities
Body text and review are pending; a heading is not an applicable rule.
02 · Classification & Information Handling
Body text and review are pending; a heading is not an applicable rule.
03 · Identity & Privileged Access
Body text and review are pending; a heading is not an applicable rule.
04 · Credentials, Keys & Certificates
Body text and review are pending; a heading is not an applicable rule.
05 · Application & API Security
Body text and review are pending; a heading is not an applicable rule.
06 · Data Protection & Retention
Body text and review are pending; a heading is not an applicable rule.
07 · Network & Infrastructure Security
Body text and review are pending; a heading is not an applicable rule.
08 · Software Supply Chain Security
Body text and review are pending; a heading is not an applicable rule.
09 · Vulnerability & Exposure Management
Body text and review are pending; a heading is not an applicable rule.
10 · Security Monitoring & Investigation
Body text and review are pending; a heading is not an applicable rule.
11 · Security Incident & Recovery Playbooks
Body text and review are pending; a heading is not an applicable rule.
12 · Security Evidence, Exceptions & Review
Body text and review are pending; a heading is not an applicable rule.
Each section will be developed with purpose, scope, responsibilities, useful figures, decisions and validation evidence.