Library
A situation in the reader's own words, before any acronym, then followed decision by decision — each one linking to the concept it exercises, and ending with what is still exposed afterwards.
2 scenarios published. None has completed independent review yet, and every card below says so. Weigh each against the primary sources it cites.
Scenario
A finance analyst reaches payroll from hotel Wi-Fi on a managed laptop whose endpoint protection is stale. The identity is valid, the device is not, and allow or deny is the wrong pair of answers.
Scenario
A third-party specialist needs access to a single internal console for a fixed engagement. The easy answer is an account, a network route and an offboarding task nobody runs.
Category
What you are trying to do
Elsewhere