Rapid Battle Cards 01–14
01 — Vulnerability vs Threat
Vulnerability: weakness/defect.
Threat: potential adverse/offensive action.
Deciding clue: hole in defense vs something that could exploit it.
02 — Threat vs Risk
Threat: potential action/event.
Risk: evaluated possibility and impact/cost of loss.
Deciding clue: what might happen vs how likely/harmful it is.
03 — Risk Classification vs Confidentiality Level
Risk classification: CRD/HRD/MRD-type sensitivity/attractiveness prioritization.
Confidentiality level: internal access/secrecy level.
Deciding clue: risk prioritization vs need-to-know handling.
04 — Confidentiality vs Regulation
Confidentiality: internal need-to-know.
Regulation: external allowed-to-know rule.
Deciding clue: internal business restriction vs law/contract/industry obligation.
05 — Authentication vs Authorization
Authentication: verify identity.
Authorization: grant privileges.
Deciding clue: “Who are you?” vs “What may you do?”
06 — Authorization vs Access
Authorization: permission decision.
Access: actual ability/use.
Deciding clue: approved privilege vs actual use of system/data.
07 — Authorization vs Entitlement
Authorization: decision to grant.
Entitlement: all data/capability exposed by the grant.
Deciding clue: approval vs effective total exposure.
08 — Audit vs Monitoring
Audit: independent compliance/control assessment.
Monitoring: operational detection/assessment of behavior.
Deciding clue: independent assurance vs observe/detect.
09 — Active vs Passive Monitoring
Active: real-time alert/interruption.
Passive: periodic snapshots/trends.
Deciding clue: respond now vs compare over time.
10 — Data Integrity vs Confidentiality
Integrity: prevent improper alteration/deletion/addition.
Confidentiality: restrict who may know/access.
Deciding clue: trustworthy unchanged data vs secrecy/access.
11 — Hash vs Private-Key Encryption
Hash: mathematical representation used for integrity/verification.
Private-key: same secret key encrypts/decrypts.
Deciding clue: verification representation vs keyed concealment.
12 — Private-Key vs Public-Key Encryption
Private-key: same shared key.
Public-key: different public/private keys.
Deciding clue: one shared secret vs paired keys.
13 — Persistent vs Dynamic Masking
Persistent: stored masked values permanently altered.
Dynamic: source remains intact; visible result changes.
Deciding clue: change the copy vs change the view.
14 — In-Flight vs In-Place Persistent Masking
In-flight: mask during movement to destination.
In-place: overwrite data in same location.
Deciding clue: transform while copying vs transform where it sits.