@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

<https://knobit.org/id/task/dsec-access-design/Q1> a edu:Question ;
    rdfs:label "Q1 (1.5 points)"@en ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/task/dsec-access-design/Q1> ;
    schema:hasPart <https://knobit.org/id/register/data-security#SE-367>,
        <https://knobit.org/id/register/data-security#SE-368>,
        <https://knobit.org/id/register/data-security#SE-369> ;
    schema:identifier "Q1" ;
    schema:position 7 ;
    schema:text "The agency's controls and the metrics, 0.5 each. (a) agency_controls tag each control with the type of data security it is, with at least three of the five types facility, device, credential, document and content present and none mis-tagged (accounts and MFA are credential, agency laptops device, the feed file document, what the portal shows content, the agency's premises facility; portal exposure is network). (b) Each control names a tool that implements it: identity management for the accounts, firewall or VPN for the portal, encryption for the file, masking or row-level security for content, endpoint management or anti-virus for devices. (c) metrics give one implementation, one performance and one risk metric, each with a formula and a target the access design can move (e.g. share of restricted columns with a column_access entry; hours from an agency leaver to the account disabled; persons holding both sides of an SoD rule)."@en .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

<https://knobit.org/id/register/data-security#SE-367> rdfs:label "dsec-access-design Q1: agency controls tagged by type of data security"@en .

<https://knobit.org/id/register/data-security#SE-368> rdfs:label "dsec-access-design Q1: a tool named for each agency control"@en .

<https://knobit.org/id/register/data-security#SE-369> rdfs:label "dsec-access-design Q1: implementation, performance and risk metrics"@en .