BAS-406 Evidence Workbook
Professional evidence workbook
Complete this while working the corresponding online lab. Entries save only in this browser until exported or printed. Do not enter live credentials, protected customer information, or uncontrolled personal data.
Station architecture and dependency inventory
Required artifact: Supervisor/controllers/networks/services/external dependencies; identity; owner; recovery coverage; unknowns
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Platform prerequisites and identity hardening
Required artifact: Versions; compatibility; time/DNS; certificates; licenses; host identity; expiration and risk register
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
RBAC and secure remote session
Required artifact: Named account; least privilege; approved targets/actions; time limit; log; revocation; logout/restoration
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Driver/network and station health baseline
Required artifact: Address/routes; poll load; duplicate identity; CPU/memory/storage; growth/latency; cause hypotheses
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Backup design and protected archive
Required artifact: Configuration/dependency scope; 3-2-1; encryption; checksums; RPO; retention; change triggers; owner
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Clean-target restore and upgrade rollback drill
Required artifact: Restore order; secrets/licenses/certs; RTO; functional proof; upgrade regression; abort/rollback evidence
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Build and recover a supervisory station
Required artifact: Architecture; RBAC; services; baseline; backup; clean restore; functions; rollback; runbook; as-left
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |