Lesson 5.4: Capstone: a crypto posture report
Cryptography in an organisation is a set of living systems: certificates that expire, keys that rotate, signatures that must verify, hashing policies, protocols that age, and a migration ahead. In the capstone you re-check each one on Northwind's systems with the commands from this course, and turn the results into a short, sealed posture report with clear asks for management.
20 min
You will learn to
- Re-check certificates and chains
- Verify signatures and key states
- Summarise hashing and protocol posture
- Quantify post-quantum exposure
- Write and seal a posture report
Key terms
- Crypto posture
- The overall state of an organisation's cryptographic controls at a point in time.
- Key ceremony
- A documented, witnessed procedure for creating or using high-value keys such as a root CA.
- Cryptographic bill of materials (CBOM)
- A machine-readable inventory of algorithms, keys and certificates in a system.
- Repeatable evidence
- Findings backed by commands or queries that give the same answer when rerun.
← Modes, IVs and authenticated encryption · All lessons · The Cyber Kill Chain: an attack step by step →