CAPA-10 - Identity-Driven Lateral Movement Failures

Following a documented failure related to identity-driven lateral movement failures, organisations must execute CAPAs with urgency and precision. This course walks through intake and triage, the selection of corrective actions that directly remove the weakness, and preventive actions that address systemic contributors. It provides concrete guidance on attack path containment, tier separation, and admin workstation controls, and explains how to structure evidence so that closure decisions remain defensible under inspection.

 

Learners also cover accountability, timeline management, and escalation for delays or recurrence. The course ends with a sustained effectiveness approach using monitoring, periodic review, and independent validation. Practical examples are used throughout the course to illustrate how organisations typically fail in this area, such as incomplete remediation plans, poorly defined ownership, or evidence that cannot be reproduced during inspections. 

 

The course explains how these weaknesses are identified during audits, supervisory reviews, or testing exercises, and how they translate into concrete findings. Learners work through realistic remediation scenarios, including how to prioritise actions based on criticality, how to document decisions in a way that can be reconstructed months later, and how to demonstrate that preventive measures remain effective after organisational or technical changes.

In this course, you should learn to:

• Differentiate corrective actions from preventive actions after governance after ICT control failures.
• Apply governance and escalation rules when timelines are at risk.
• Select objective evidence artefacts for management sign-off controls and auditability.
• Plan independent validation before CAPA closure decisions.
• Define monitoring indicators to prove sustained effectiveness..

Turn findings on identity-driven lateral movement failures into a defensible CAPA plan with validation, escalation, and sustained effectiveness.

• Board Members
• Senior Management
• CIO & CISO
• ICT Risk
• IT Operations
• Security
• Data Office
• Internal Audit
• Vendor Management

120 minutes