Policies

Policy-as-code. Every decision is traceable to a versioned, testable rule.

Unauthorised Credential Access

CYBER-CRED-001

Refuse

Version

v1.4

Owner

Security Policy Team

Reason Code

UNAUTHORISED_CREDENTIAL_ACCESS

Test Coverage

96%

Policy Definition

cyber-cred-001.policy

policy_id: CYBER-CRED-001
version: 1.4
domain: cyber
category: credential_access

conditions:
  requested_capability contains credential_theft
  AND
  target_ownership in [unknown, third_party]

decision:
  REFUSE

reason_code:
  UNAUTHORISED_CREDENTIAL_ACCESS

safe_alternatives:
  - credential_rotation
  - phishing_awareness
  - detection_rules
  - identity_hardening

Safe Alternatives Offered

credential rotationphishing awarenessdetection rulesidentity hardening