Reviewing Lantern Markets' change evidence the way an auditor or an insider pushing an unapproved change would: the external auditor's finding that 212 of 9,640 production deployments matched no approved change record, although 99.1 percent of tickets had approvals; a link map where only 53 percent of deployments joined to a change by key and 1,317 matches were ambiguous; and the eight-station evidence rail from change population, evidence chain, approval integrity and pipeline provenance through emergency changes, detection of unrecorded change, sampling and testing to metrics and attestation, ending in a change evidence assurance file the auditor can re-perform.

CY-EXPERT-052Expert Level · Configuration Management

Change Evidence Adversary-Aware Review — The Evidence Rail

An expert-level course on reviewing your own change-management evidence the way an auditor, a regulator or someone trying to push an unapproved change into production would - and closing every gap they would find. Work the Evidence Rail - eight stations from change population and evidence sources through evidence-chain design, approval integrity and segregation of duties, pipeline provenance, emergency and standard changes, unauthorised-change detection, sampling and audit response, to metrics, attestation and programme optimisation - as Marek, IT controls assurance lead at a listed online brokerage, building one Change Evidence Assurance File.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Define a complete production change population across code, configuration, IaC, console, database, SaaS, flag and vendor channels, proven by a writer inventory and reproducible IPE.
Design an evidence chain that carries a verified change id from request to running state, with ordering tests and immutable, retained logs.
Prove approval integrity and segregation of duties: two-person review baselines, one human per identity, independent code owners and separated approve and deploy rights.
Evidence pipeline provenance with signed commits, SLSA v1.0 attestations, admission enforcement and GitOps ancestry tests, and state build levels honestly.

Price:৳12,000