Custodia Registry · C01

Account security

25 minutes. · 10 slides

Lesson video coming soon. The player below contains a sample video, not this lesson. You can use the written lesson and slide guide now.

Open video on YouTube ↗

Download slide guide (PDF)10 pages · 3.9 MB

Work through the lesson

Use these explanations alongside the slide guide. Expand any section to read its full explanation.

Your task and authority

  • Confirm your assigned duties
  • Use the fictional training case
  • Verify the result and its history

Learning outcome
Learner reaches permitted work, finds help and distinguishes own activity from central audit.

Read the full explanation

Our audience is All account holders. Before the demonstration, confirm these prerequisites: Issued training account and approved HTTPS origin. The action-level access conditions are: Authenticated active account; 2FA and step-up as prompted. Check the actual account and record state. The goal is not simply to find a button: Learner reaches permitted work, finds help and distinguishes own activity from central audit.

Approved sign-in

  • Sign in at the approved origin and complete the required 2FA challenge.

What to check
Use the address provided by your organization and your own account. Complete the requested second factor privately. A recovery code is an account secret; it must never appear in a recording or shared slide.

Read the full explanation

Sign in at the approved origin and complete the required 2FA challenge. Use the address provided by your organization and your own account. Complete the requested second factor privately. A recovery code is an account secret; it must never appear in a recording or shared slide. As we work through this example, identify the record or account involved and point out the evidence that confirms this step. If the expected control or result is missing, pause and explain the condition before continuing.

Your workspace

  • Open Dashboard and identify assigned queues, then open Help > User guide.

What to check
The dashboard and User guide reflect the work available to your account. A colleague may see additional controls because their duties and grants differ. Find your assigned queue before opening a record.

Read the full explanation

Open Dashboard and identify assigned queues, then open Help > User guide. The dashboard and User guide reflect the work available to your account. A colleague may see additional controls because their duties and grants differ. Find your assigned queue before opening a record. As we work through this example, identify the record or account involved and point out the evidence that confirms this step. If the expected control or result is missing, pause and explain the condition before continuing.

Notifications and activity

  • Review Notifications and My activity; explain live items versus history.

What to check
Notifications highlight current work; cleared items move to history. My activity describes your own actions. It is not the same as the central audit view used by an authorized reviewer.

Read the full explanation

Review Notifications and My activity; explain live items versus history. Notifications highlight current work; cleared items move to history. My activity describes your own actions. It is not the same as the central audit view used by an authorized reviewer. As we work through this example, identify the record or account involved and point out the evidence that confirms this step. If the expected control or result is missing, pause and explain the condition before continuing.

Profile and sessions

  • Review your profile, password and sessions; revoke only the designated training session.

What to check
Check Profile and security for password, two-factor and notification settings. Review the sessions list before revoking the designated practice session. Do not remove an unfamiliar session blindly; use the local support process.

Read the full explanation

Review your profile, password and sessions; revoke only the designated training session. Check Profile and security for password, two-factor and notification settings. Review the sessions list before revoking the designated practice session. Do not remove an unfamiliar session blindly; use the local support process. As we work through this example, identify the record or account involved and point out the evidence that confirms this step. If the expected control or result is missing, pause and explain the condition before continuing.

Sign-out and recovery

  • Sign out and use the approved recovery channel if needed.

What to check
Sign out when the session is finished, especially on a shared device. If sign-in fails, use the approved recovery route. Public registration and email recovery depend on the organization’s deployment settings.

Read the full explanation

Sign out and use the approved recovery channel if needed. Sign out when the session is finished, especially on a shared device. If sign-in fails, use the approved recovery route. Public registration and email recovery depend on the organization’s deployment settings. As we work through this example, identify the record or account involved and point out the evidence that confirms this step. If the expected control or result is missing, pause and explain the condition before continuing.

Exceptions and recovery

  • Identify the blocked condition
  • Preserve the relevant evidence
  • Use the authorized next step

Important boundary
Missing controls can reflect permissions. Never record recovery codes or MFA setup secrets. Public registration and email delivery depend on deployment policy.

Read the full explanation

Consider the exception before deciding to retry. Missing controls can reflect permissions. Never record recovery codes or MFA setup secrets. Public registration and email delivery depend on deployment policy. Explain what you expected and what was actually shown. Keep the record identifier and sanitized error context, then refer the issue to the person responsible for that decision. A missing or blocked control is not a reason to borrow a more powerful account.

Guided practice

  • Work within the assigned role
  • Show the resulting state
  • Explain one exception

Your exercise
Find your assigned queue, open the User guide and locate your own activity. Explain where you would review sessions, then sign out.

Read the full explanation

Now use the approved fictional example. Find your assigned queue, open the User guide and locate your own activity. Explain where you would review sessions, then sign out. Explain the identity, current state and intended action before acting. At the end, show the evidence of the result and name the next responsible person if the workflow cannot proceed. Destructive actions and live external sends are discussed using prepared examples.

Practice debrief

  • Correct identity and authority
  • Traceable result and history
  • A justified next step

Expected answer
The learner identifies the correct account and queue, distinguishes personal activity from central audit, locates account security and signs out without exposing secrets.

Read the full explanation

The answer should establish the following: The learner identifies the correct account and queue, distinguishes personal activity from central audit, locates account security and signs out without exposing secrets. Walk through the evidence in the same order as the workflow. Explain the specific boundary discussed in this lesson. If a result could not be established, report it as unverified and identify what would be needed to complete the task.