A setting is a claim. A repeatable test gives you evidence.

Get the free three-page Security Control Verification Checklist: 10 practical checks, a four-step testing workflow, and a reusable evidence log.

Identity. Access. Networks. Logging. Recovery.

Free PDF. No signup required.

By Bruce L. Hernandez, author of Cybersecurity Engineering in Practice and Security Controls in Practice.

Put the checklist into practice

Build your foundations

Cybersecurity Engineering in Practice

New to cybersecurity? Start here to understand networking, operating systems, identity, applications, cloud environments, and the systems behind the checklist. Build the foundations for better security decisions.

Best for: motivated beginners and career changers.

Implement, verify, and operate controls

Security Controls in Practice: From Requirements to Working Enterprise Protection

Know the fundamentals? Go deeper with 20 enterprise controls and 41 worked failure cases. Explore implementation, verification matrices, troubleshooting, drift, and operating evidence.

Best for: security engineers, platform engineers, and assessors.