QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Moving Thornbury Regional Bank from access decided once at sign-in to continuous verification: on 9 December 2026 a contractor's laptop fell out of compliance at 09:02 and kept a finance and treasury session open until 18:03, nine hours, while now a compliance loss is enforced in a median of 3 minutes. Identity, device, location and behaviour signals feed a decision point that allows, steps up or denies, and high-risk sessions evaluated continuously rise from none of 22,400 a day to 67%, with privileged admin at 98% and finance at 92%, against the Board's 90% target, with option B put to the Board on 17 June 2027.
CY-PRO-056Pro Level · Zero Trust

Zero Trust Continuous Verification Decisions

A forty-hour Pro-level zero trust architecture governance simulation run on a live continuous verification decision board, where you are Chief Security Architect at a regional bank eighteen months into zero trust; access is decided once at sign-in, sessions last 12 hours, and a contractor's laptop that fell out of compliance keeps a treasury session for nine hours until internal audit — not a control — finds it. You measure what happens after sign-in, make signals fit to act on, design decisions that restrict before they deny, keep friction within bounds for everyone, verify privileged and third-party access, make the decision path resilient, govern exceptions, prove the control monthly, price the options at the margin and defend the decision to the Board.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Measure continuous verification honestly — sessions re-evaluated after sign-in, exposure windows, enforcement ceilings and signal freshness — and contain a known exposure without disrupting the business.
  • Design continuous verification that works: fit-for-purpose signals, a response ladder with calibrated thresholds, bounded failure stances, silent re-evaluation, accessible step-up and verified privileged, partner, contractor and vendor access.
  • Run it as a resilient, governed control — a critical decision path, expiring exceptions, daily drift detection, workload identities under policy, monthly control tests and six key risk indicators the Board can read.
  • Price options at the margin, name residual risks outside appetite for the Board's own acceptance, and win a resolution that adopts, funds, assigns, accepts, monitors and reviews.

Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.