Week 25

In this week's content we will be looking at cyber security planning: selecting proportionate controls through a realistic Level 3 IT context. You will be required to build a proportionate security improvement plan for Civic Arts Network, comparing controls by risk reduction, user impact and feasibility.

Steps to complete:
1. Evaluate five control options against risk reduction, cost, usability and implementation effort.
2. Read a deliberately vague security-policy extract and identify statements that are not testable or actionable.
3. Compare multi-factor authentication, access reviews, encryption, awareness activity and offline continuity arrangements.
4. Consider accessibility, operational disruption, cost and residual risk.
5. Write a 450-word plan prioritising controls and explaining how effectiveness would be checked.
6. Write a three-sentence board summary: risk, decision, evidence.

By the end of the session you should have a control decision matrix, rewritten policy statements and a prioritised security improvement plan.

Week 25 Student Resource Pack

Last Updated
2026-09-14 09:28:34