Identity containment: verification worksheet
The recovery ticket is closed. Review sessions, tokens, methods, devices, and app grants to establish what access remains and who owns the next check.
Worksheets
Download editable worksheets, evidence checklists, and tabletop exercises. Each comes with an article explaining when and how to use it.
23 worksheets
Clear searchIdentity containment: handover exercise
The recovery ticket is closed. Review sessions, tokens, methods, devices, and app grants to establish what access remains and who owns the next check.
Account recovery tabletop: facilitator agenda
Run a 90-minute discussion with the help desk, identity team, incident responders, and an application owner. Record the decisions, missing evidence, and who will test each fix.
Account recovery tabletop: role assignments
Run a 90-minute discussion with the help desk, identity team, incident responders, and an application owner. Record the decisions, missing evidence, and who will test each fix.
Account recovery tabletop: decision record
Run a 90-minute discussion with the help desk, identity team, incident responders, and an application owner. Record the decisions, missing evidence, and who will test each fix.
Account recovery tabletop: improvement register
Run a 90-minute discussion with the help desk, identity team, incident responders, and an application owner. Record the decisions, missing evidence, and who will test each fix.
Help-desk verification: an editable copy of the procedure table
Give help-desk staff a decision guide for the difficult recovery request: the usual verification method is unavailable, and the caller wants an exception.
Sign-in evidence: case packet
Follow a fictional recovery case through sign-in, audit, and application records. See which conclusions the records support and which questions remain open.
Sign-in evidence: record collection guide
Follow a fictional recovery case through sign-in, audit, and application records. See which conclusions the records support and which questions remain open.
Sign-in evidence: final case worksheet
Follow a fictional recovery case through sign-in, audit, and application records. See which conclusions the records support and which questions remain open.
One-page scenario brief
Follow a simulated attack across a person, a workflow, and a technical control. Connect each observed outcome to the team that can act on it.