4.3 Enforcement test
Completion requirements
Identify one rule your organization has recorded — an access restriction, an approval requirement, a naming standard, a retention policy.
Then test whether it is enforced, not whether it is configured.
Report the method, not the conclusion. How did you test it? What would have counted as a failure? A rule that displays correctly in an admin interface and governs nothing looks identical to one that works.
300–600 words · about 45–75 minutes.
How you will be graded — aim for Proficient.
| 1 · Emerging | The rule quoted and asserted to be working. |
| 2 · Developing | A test described, but one that would pass whether or not the rule is enforced. |
| 3 · Proficient — target | The method reported, not just the conclusion. How you tested it, and what would have counted as a failure. A rule that displays correctly in an admin interface and governs nothing looks identical to one that works — your test has to tell them apart. |
| 4 · Exemplary | Also finds a rule that is configured and unenforced, and reports it without softening. |