Why this game exists. Week 11 is cybersecurity controls and compliance, and a
control only counts once it can be shown, not just believed. These rounds are the
decisions that sit under that: the smallest grant that actually meets a request, what
has to exist before anything is approved, who is the right person to decide, and what
proves a review happened when somebody asks later. Where a round needs a real access
request or a security escalation, it draws on the same service desk ticket bank week 3
uses and on desk-reference.html, which already states Cyber GRC as the
single door for anything suspected security. No round claims a Jahez specific practice
that is not stated in a file in this lab.