BOOT-BAC Evidence Workbook
Professional evidence workbook
Complete this while working the corresponding online lab. Entries save only in this browser until exported or printed. Do not enter live credentials, protected customer information, or uncontrolled personal data.
Object/property/service map
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Read, write and priority release
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
PICS, BIBB and BTL capability review
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
BACnet/IP discovery and routing
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
BBMD, BDT and foreign-device analysis
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
MS/TP physical commissioning
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Token and performance diagnosis
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Packet capture and APDU diagnosis
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
COV, schedule and event lifecycle
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Trend and point-truth validation
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
BACnet/SC security design review
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Six-fault integration challenge
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |
Multi-vendor commissioning and handoff capstone
Required artifact: Authority; topology/identity; normal model; capture/readings; calculations; discriminating test; controlled action; changed case; rollback/restoration; sanitized record.
| Identity, source, mode, authority | |
|---|---|
| Hazards, impacts, prohibited actions, stop criteria | |
| Expected normal and acceptance basis | |
| As-found evidence and timestamps | |
| Calculations with units and reasonableness | |
| Hypotheses, contradictions, discriminating test | |
| Action, expected result, abort/rollback | |
| Result, changed case, restoration, as-left | |
| Open risk, owner, due date, defense |