CCSI

Lesson 10.3 · 9 min read

Officer checklist and the proctored assessment

A reusable review checklist, and how official certification works.

Design review checklist

  1. Assets and adversaries: listed, with owners; operator explicitly in or out of scope.
  2. Trust boundary: drawn; every crossing (inputs, outputs, logs, metrics, admin access) listed.
  3. TEE choice: technology, isolation unit and known limitations documented.
  4. Attestation: verifier identified; checks cover chain, debug, TCB, measurements, freshness, binding.
  5. Key release: every key gated on attestation; no unconditioned path; custody per party.
  6. Supply chain: reproducible or provenance-backed builds; approval records.
  7. Operations: monitoring, minimum TCB, advisory process, audit logs enabled.
  8. Scope statement: what is not protected, written plainly.

About certification

Completing these modules, quizzes and the practice exam on this site does not grant a certificate. The official CCSI Officer certificate is issued by CCSI only after a proctored assessment. To arrange one, use the contact form and choose "CCSI Officer course". CCSI does not claim accreditation by any external body for this course.

End of module 10

Take the module 10 quiz to check your understanding.