@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

<https://knobit.org/id/task/dsec-log-integrity-recertification/C3> a edu:Question ;
    rdfs:label "C3 (3 points)"@en ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/task/dsec-log-integrity-recertification/C3> ;
    schema:hasPart <https://knobit.org/id/register/data-security#SE-556>,
        <https://knobit.org/id/register/data-security#SE-557>,
        <https://knobit.org/id/register/data-security#SE-558> ;
    schema:identifier "C3" ;
    schema:position 3 ;
    schema:text "Privileged and restricted access outside recertification, 1 each. (a) DWH_BREAKGLASS (emergency full administration, 3 holders) is in no campaign. (b) SVC_CRM_SYNC (service account reading customer.personal_code) is in no campaign. (c) Each is put into a campaign with a frequency and a reviewer who does not hold it (break-glass in RC-102 under the CIO, or its own campaign; the service account reviewed by its owner, the CRM product owner, or the data owner)."@en .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

<https://knobit.org/id/register/data-security#SE-556> rdfs:label "dsec-log-integrity-recertification C3: break-glass role in no recertification campaign"@en .

<https://knobit.org/id/register/data-security#SE-557> rdfs:label "dsec-log-integrity-recertification C3: service account reading restricted data in no campaign"@en .

<https://knobit.org/id/register/data-security#SE-558> rdfs:label "dsec-log-integrity-recertification C3: uncovered roles put into a campaign with an independent reviewer"@en .