All categories/Security and operations
Security and operations
Access, backup, incident, compliance, deployment. Worst case first, prevention second.
48 entries here · one process per category, checkpoints written per job
- Live incident responseThe site is down and everyone is changing things at once.
- Severity levels and pagingEvery incident pages everyone, and now nobody responds.
- Rollback decisionMetrics dropped after release: fix forward or roll back?
- Throttling and degradationTraffic spikes cascade and everything falls over.
- Slow query workPages slow down over time and the database is saturated.
- Pools and timeoutsIntermittent connection timeouts that a restart clears.
- Disk and memory alarmsDisk is full again: delete logs and move on?
- Certificate expiryThe certificate expired and every visitor sees a warning.
- DNS and domain cutoverChanging servers and afraid of a broken cutover.
- Backup and restore drillsBackups exist until the day you need one.
- Capacity planningGrowth arrives and servers are scaled after the crash.
- Monitoring designPlenty of metrics and humans still find the outages.
- Alert noise reductionThree hundred alerts a day, all ignored.
- Logging standardsTroubleshooting reveals the key line was never logged.
- Canary releaseFull rollout means every incident hits everyone.
- Config managementConfigs drift and rebuilt machines do not match.
- Container troubleshootingA container will not start and the log is one cryptic line.
- Dependency isolationA third-party API fails and our whole page goes blank.
- Blameless postmortemThe review turns into a trial and the same failure returns.
- On-call handoverHandover was 'all quiet' and it exploded at midnight.
- Cloud cost reductionThe cloud bill climbs and nobody knows where.
- Service dependency mapChange one service and nobody knows who depends on it.
- Environment parityIt works in test and fails in production.
- Disaster recovery targetsLeadership asks how fast we recover and I cannot answer.
- Asset and exposure inventoryNo idea how much of our estate faces the internet.
- Weak credentialsSomeone still uses admin/123456 and will not change it.
- Least privilege reviewEveryone uses an admin account because it is convenient.
- Secrets managementA key sits in front-end code and got committed.
- Dependency vulnerabilitiesA pile of CVEs and no idea which to fix first.
- Web vulnerability self-checkA self-check for injection, XSS, and SSRF.
- API authorisation reviewThe API checks login but not whether this user may see this record.
- Upload handlingUsers can upload anything at all.
- Logging and audit trailsAfter an incident nobody can say who did what and when.
- Data classification and maskingTest environments run on production data including ID numbers.
- Personal data complianceLots of user data collected and compliance is unclear.
- Access revocation on exitThree months after they left, the VPN still works.
- Phishing simulationTraining is ignored; a phishing drill is proposed.
- Security incident responseA breach is suspected and the first move is unclear.
- Ransomware resilienceFear of ransomware and the backups live on the same host.
- Object storage reviewA bucket may be publicly readable.
- Server hardening baselineNew machines ship with default settings.
- WAF and rate limitingThe WAF is on and attacks still land.
- Vendor security reviewA third party will receive our data.
- Secure code reviewReviews cover style and ignore security.
- Reading a pentest reportThe report is jargon and leadership wants to know how bad.
- Security awareness trainingTraining is forgotten and the next link still gets clicked.
- Breach notification prepIf data leaks, what do we say and when?
- Security budget prioritiesA limited budget against an endless list.
Try another category
- Writing and copy47
- Office and documents52
- Data and analysis50
- Code and debugging50
- Learning and exams47
- Life and decisions53
- Agents and automation48
- Image and video45
- Job hunting30
- Workplace communication39
- Marketing and growth36
- E-commerce36
- Teaching and training36
- Research35
- Translation and localisation28
- Legal and contracts35
- Finance and operations35
- Product and design39
- Health35
- Customer support48
- Hiring and people ops48
- Social and content ops47
- Engineering and manufacturing48