Page 293 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Profile D standardizes communication between access peripherals and a securely located client. It does not certify the complete door, credential, or life-safety design.
Read the guide
A successful OSDP installation needs evidence for exact verified products, Secure Channel, addressing, cabling, power, features, and performance under load.
Read the checklist
SIA’s 2025 Code organizes privacy responsibilities around purpose, impact assessment, minimization, accuracy, retention, security, access, transparency, and review.
Read the playbook
Axis documents distinct certificate roles for HTTPS server identity and 802.1X network authentication. Each needs ownership, expiry monitoring, renewal, and recovery testing.
Read the guide
Axis places evidence collection between detection and cleanup and warns that changing or powering off a suspected device can destroy information needed for investigation.
Read the playbook
Axis signed video can support origin and integrity verification when signatures survive recording and export. It does not replace chain of custody or lawful-use controls.
Read the explainer
NIST SP 800-88 Rev. 2 emphasizes a governed media-sanitization program, appropriate clear, purge, or destroy methods, and separate verification and validation.
Read the checklist
Exchange Online message trace records how Microsoft 365 handled a message. Narrow queries, the correct identifier, ingestion timing, and preserved results make it useful evidence for mail-flow troubleshooting.
Read the checklist
Microsoft Purview Audit can investigate activity across Microsoft 365, but reliable evidence depends on verified ingestion, licensing-based retention, precise UTC queries, least-privileged access, and preserved exports.
Read the guide
Restricted Access Control can require both normal SharePoint permission and membership in an allowed Microsoft 365 or Entra group before a user opens site content.
Read the guide