@prefix activity: <https://knobit.org/id/activity/> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix knobit: <https://knobit.org/id/knobit/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

activity:SO-5 a edu:Activity ;
    rdfs:label "Monitor and audit access"@en,
        "Juurdepääsu seire ja audit"@et ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    rdfs:comment "Stage 5 (Monitoring and audit) of the data-security skill: produces 05-monitoring/monitoring.yaml and passes the stage's validation gate."@en ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/activity/data-security/05-monitoring-audit> ;
    edu:requiresKnobit knobit:S-501,
        knobit:S-502,
        knobit:S-503,
        knobit:S-504,
        knobit:S-505,
        knobit:S-506,
        knobit:S-507,
        knobit:S-508,
        knobit:S-509,
        knobit:S-510,
        knobit:S-531,
        knobit:S-532,
        knobit:S-533,
        knobit:S-551,
        knobit:S-552,
        knobit:S-553 ;
    schema:position 5 .

edu:Activity rdfs:label "Activity"@en,
        "Tegevusnäitaja"@et .

knobit:S-501 rdfs:label "Recognises privileged access not logged"@en .

knobit:S-502 rdfs:label "Recognises an access recertification by the holder"@en .

knobit:S-503 rdfs:label "Recognises a log nobody reviews"@en .

knobit:S-504 rdfs:label "Recognises log retention shorter than required"@en .

knobit:S-505 rdfs:label "Recognises an audit trail administrators can edit"@en,
        "Recognises logs the recorded people can alter"@en .

knobit:S-506 rdfs:label "Recognises a monitoring rule with no threshold or response"@en .

knobit:S-507 rdfs:label "Recognises an overdue recertification"@en .

knobit:S-508 rdfs:label "Recognises privileged access outside recertification"@en .

knobit:S-509 rdfs:label "Recognises restricted reads not logged"@en .

knobit:S-510 rdfs:label "Recognises rejected access still active"@en .

knobit:S-531 rdfs:label "Separates log integrity from the people logged"@en .

knobit:S-532 rdfs:label "Revokes access a review did not confirm"@en .

knobit:S-533 rdfs:label "Assigns an independent reviewer to an access recertification"@en .

knobit:S-551 rdfs:label "Explains logging and monitoring of data access"@en .

knobit:S-552 rdfs:label "Explains access recertification"@en .

knobit:S-553 rdfs:label "Explains PCI DSS audit log retention"@en .