Respond and rebuild
Complete the server security review
Verify access, exposure, updates, privileges, secrets, observability, backups, recovery, and ownership as one repeatable operating checklist.
8 minute lesson
Server security is maintenance, not a one-time installation step. Make the review repeatable after every meaningful infrastructure change.
Reconcile accounts and keys, listeners and firewall rules, packages and services, file permissions, secret inventory, alerts, backup restores, and incident contacts. Record exceptions with an owner and deadline. Remove the lab server when the course is complete.
A checklist that only records “done” becomes stale quickly. Evidence such as fingerprints, package versions, listener output, alert tests, and restore times makes the review repeatable.
Date every artifact and name its owner. A passing result has limited value after accounts, packages, firewall rules, or deployment architecture change without another review.
Run the final review and save non-secret evidence for access, exposure, updates, permissions, alerts, and recovery. Introduce one disposable mismatch, prove the review catches it, then remove the lab server and verify it no longer responds.
Lesson completed