@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix knobit: <https://knobit.org/id/knobit/> .
@prefix outcome: <https://knobit.org/id/outcome/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .

outcome:SO-5 a edu:LearningOutcome,
        edu:Skill ;
    rdfs:label "Monitors access with logs its subjects cannot alter and recertifications its holders do not sign"@en,
        "Seirab juurdepääsu logidega, mida nende subjektid muuta ei saa, ja õiguste korduvülevaatustega, mida õiguste omajad ise ei kinnita"@et ;
    dcterms:description "Stage 5 of the data-security skill: Monitors access with logs its subjects cannot alter and recertifications its holders do not sign; produces 05-monitoring/monitoring.yaml."@en ;
    dcterms:identifier "SO-5" ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    edu:hasPrerequisite outcome:SO-1,
        outcome:SO-3 ;
    edu:includesKnobit knobit:S-501,
        knobit:S-502,
        knobit:S-503,
        knobit:S-504,
        knobit:S-505,
        knobit:S-506,
        knobit:S-507,
        knobit:S-508,
        knobit:S-509,
        knobit:S-510,
        knobit:S-531,
        knobit:S-532,
        knobit:S-533,
        knobit:S-551,
        knobit:S-552,
        knobit:S-553 ;
    edu:relatedTopic <https://knobit.org/id/topic/dmbok2-data-security> .

edu:LearningOutcome rdfs:label "Learning outcome"@en,
        "Õpiväljund"@et .

edu:Skill rdfs:label "Skill"@en,
        "Oskus"@et .

knobit:S-501 rdfs:label "Recognises privileged access not logged"@en .

knobit:S-502 rdfs:label "Recognises an access recertification by the holder"@en .

knobit:S-503 rdfs:label "Recognises a log nobody reviews"@en .

knobit:S-504 rdfs:label "Recognises log retention shorter than required"@en .

knobit:S-505 rdfs:label "Recognises an audit trail administrators can edit"@en,
        "Recognises logs the recorded people can alter"@en .

knobit:S-506 rdfs:label "Recognises a monitoring rule with no threshold or response"@en .

knobit:S-507 rdfs:label "Recognises an overdue recertification"@en .

knobit:S-508 rdfs:label "Recognises privileged access outside recertification"@en .

knobit:S-509 rdfs:label "Recognises restricted reads not logged"@en .

knobit:S-510 rdfs:label "Recognises rejected access still active"@en .

knobit:S-531 rdfs:label "Separates log integrity from the people logged"@en .

knobit:S-532 rdfs:label "Revokes access a review did not confirm"@en .

knobit:S-533 rdfs:label "Assigns an independent reviewer to an access recertification"@en .

knobit:S-551 rdfs:label "Explains logging and monitoring of data access"@en .

knobit:S-552 rdfs:label "Explains access recertification"@en .

knobit:S-553 rdfs:label "Explains PCI DSS audit log retention"@en .

outcome:SO-1 rdfs:label "Draws requirements from the regulations in force and follows their data to every copy"@en,
        "Tuletab nõuded kehtivatest õigusaktidest ja järgib nendega hõlmatud andmeid kuni iga koopiani"@et .

outcome:SO-3 rdfs:label "Designs access by need, with duties segregated and masking that holds"@en,
        "Kavandab juurdepääsuõigused vajaduspõhiselt, ülesannete lahususe ja töökindla maskeerimisega"@et .

<https://knobit.org/id/topic/dmbok2-data-security> rdfs:label "Data security (DAMA-DMBOK2 chapter 7)"@en,
        "Andmeturve (DAMA-DMBOK2 7. peatükk)"@et .