Software & AI
Secure coding
A request that works is not necessarily authorized. Build trusted actor context, data boundaries, parameterized queries and field allowlists together in Harbor Desk.
Guide + practice
Keep your work for your next visit.
Sign inIn practice workpacks save reviewed steps to your account and continue on another device.
Explore the library
119 resultsCloud & Network
Cloud identity, IAM and RBAC
Harbor Desk now runs in the cloud. Separate human, pipeline and workload identities, and demonstrate least privilege without confusing sign-in with resource authority.
Guide + practice
SOC & Response
SOC alert triage and incident scope
Enter Harbor-17 through its first alert. Verify origin, assess service impact and separate observed facts from explanations not yet established.
Guide + practice
OT / ICS
OT asset inventory and process context
Move from an IP list to an inventory with process, ownership, dependencies and evidence provenance. Investigate why a Harbor plant asset is absent from observations.
Guide + practice
Identity & PAM
Identity lifecycle: join, move and leave
Move from account tickets to verified access outcomes. Track ownership and lifecycle separately for employees, suppliers and application identities.
Guide + practice
Data Security
Data classification, ownership and lineage
Move from a file label to a data passport with business purpose, ownership, copies and handling conditions.
Guide + practice
Regulation
Risk-based cyber audit planning
Before a checklist, establish business risk, independence, scope and the decision that needs assurance.
Guide + practice
Operations
Business continuity and disaster recovery
Define the critical service; connect recovery objectives, the call tree and evidence of safe return in one plan.
Guide + practice
Software & AI
Web application security testing
Test browser behavior, server sessions and file-processing boundaries together. Distinguish scanner output from a validated finding.
Guide + practice
Cloud & Network
Container images and the supply chain
Trace which contents were released by which builder and tests instead of trusting a label. Assess image, registry and runtime separately.
Guide + practice
SOC & Response
Phishing and email investigation
Review displayed sender, authentication headers, destination domains and user impact together. Develop evidence without opening suspicious destinations.
Guide + practice
OT / ICS
Zones, conduits and trust boundaries
Review a fictional plant diagram using an actual local JSON model. Distinguish what DMZ, control and safety boundaries establish and what remains unproven.
Guide + practice