security
Security of Sistema Candeia
Security combines identity, least privilege, segregation of competences, auditing and multiparty controls to prevent a single account, key, server or provider from dominating an essential institutional function.
Least privilegeNo single point of controlSeparate legal authorisation
Technical security does not create legal competence
Who executes
Privileged access must be individually attributable, revocable and recoverable.
Who may decide
An operation may require a judicial order, electoral decision, monetary authorisation or another competence independent of the technical credential.
How abuse is prevented
Critical institutional actions require barriers against unilateral control and an auditable trail.
Related pages
Institutional and technical state
SecurityTechnical controls must protect without expanding administrators’ legal competence.
What already exists in Candeia OSThe Cybersecurity interface exists as a demonstration; there is not yet an operational security operations centre.
What that means todayThe interface shows the flow; institutional operation and official records depend on the competent function and source.