Flagship course
Vault Audit Fundamentals
A practical curriculum for reviewing encrypted volumes and shared vaults so your next write-up can be re-run by someone who was not in the room.
Learning outcomes
- Produce an inventory map that names owners, paths, and encryption boundaries.
- Sample access logs without mistaking volume for insight.
- Draft findings that separate evidence, interpretation, and recommended next checks.
- Identify at least one limitation you cannot close inside the review window.
Modules
- Module 1 — Surface naming Label vaults, shares, and offline exports so two reviewers describe the same object.
- Module 2 — Encryption posture walkthrough Confirm what is encrypted, what is merely “behind a login,” and where keys actually live.
- Module 3 — Access-path tracing Follow identity → group → share → guest exception with a worksheet you can reuse.
- Module 4 — Retention & exception narrative Capture deletion gaps and temporary exceptions without overstating legal conclusions.
- Module 5 — Report clinic Rewrite a vague finding into a re-runnable note; peer critique optional.
Instructor
Soo-yeon Han
Former storage reliability engineer who now designs Apibridge Hub labs. Favors annotated screenshots over slide decks and keeps office hours aligned with Korea evening windows when possible.
Informational pricing
Included with the Review Desk and Audit Studio tiers. See pricing for current KRW figures. No checkout on this page.
FAQ
Do I need a production vault to complete labs?
No. We recommend a non-production volume or a disposable encrypted container. Production systems should only be observed under your own change policy.
Is this a certification?
No. You receive curriculum access and optional feedback. We do not issue regulated certifications.
What is a real limitation of this course?
We do not cover every vendor’s admin console. Windows ACL edge cases and some appliance UIs receive fewer screenshots than Linux-oriented labs. If your stack is appliance-heavy, budget extra time to translate the worksheets.
Can this replace a formal audit firm?
No. The course trains your internal review habits. External audits, legal conclusions, and financial decisions remain outside our scope. See Not Financial Advice.
Reviews from this course
“Module 3’s worksheet exposed a nested group that granted write access through a dormant project channel. I still think Module 2 moves quickly if you are new to key custody diagrams.”
Report clinic was the keep-worthy part. Would enroll a teammate for Access Path Clinics next.