Assess identity security for a small example organization
Two DCs, one CA, virtualization, and backup. Is "the Domain Admin count is low" enough?
This evidence consists of synthetic examples created for teaching.
Evidence
Kimlik
2 DCs and 1 Enterprise CA; owners of service identities are recorded.Administration
Email and privileged administration are performed from the same daily-use device.Infrastructure
The backup administrator has DC restore authority; this is not in the identity team's inventory.Evidence
AD object audit scope is incomplete; only sign-in records are collected centrally.Question
Which assessment is more complete?