
This point is worth referencing: operational and daily office computers should be properly isolated and managed separately, with dedicated machines for dedicated purposes. It is unrealistic to completely prohibit personal use or block open-source/third-party applications on daily office computers. “The team requires additional time to design and implement a separate revocation process.” — This indirectly indicates a lack of emergency drills for the 7702 scenario.
