Merge remote-tracking branch 'mirror/main' into main

cards.tex

@@ -51,7 +51,7 @@
 \Monitoring{2}{-}{-}
 \Monitoring{3}{-}{-}
 \Monitoring{4}{-}{-}
-\Monitoring{5}{-}{-}
+\Monitoring{5}{Information disclosure}{We don't restrict access to the sensitive parts of our logs.}
 \Monitoring{6}{Insufficient traceability}{We can't easily identify useful information in logs.}
 \Monitoring{7}{Missing cost alerting}{We won't get an alert if an end user generates huge cloud bills for us.}
 \Monitoring{8}{No log integrity}{We don't notice if an authenticated attacker/developer deactivates or manipulates our tools for traceability.}