Exam CCAK topic 1 question 198 discussion

D. Additional monitoring When scripts are running in the background with minimal human oversight, additional monitoring is the most relevant control for identifying cases of misuse. Effective monitoring allows for the continuous observation of script activity, enabling the detection of anomalous behavior or unauthorized actions in real-time. By implementing logging and alerting mechanisms, organizations can quickly identify and respond to potential misuse or errors that occur during script execution. While additional manual testing and increased regression testing can help ensure that scripts function correctly before they are deployed, they are not as effective for ongoing detection of misuse. Segregation of duties is important for reducing the risk of unauthorized actions by ensuring that no single individual has control over all aspects of a process, but it does not directly address the need for real-time detection of misuse in running scripts.

P# 357 Because CI/CD pipelines offer an automated pathway into production, stricter access controls should be implemented for these systems, particularly build servers and code repositories. And because scripts run continuously in the background with minimal human oversight, an additional monitoring process or control is needed to catch errors and misuse.