Week 23

In this week's content we will be looking at cyber security risk: evidence, threats and vulnerabilities through a realistic Level 3 IT context. You will be required to analyse a safe fictional security evidence pack, distinguish threat from vulnerability and produce a prioritised risk brief for managers.

Steps to complete:
1. Rank benign threat/vulnerability pairs by likelihood and impact and explain uncertainties.
2. Read the Civic Arts Network profile and identify valuable assets, users and dependencies.
3. Read the supplied safe authentication/activity log and separate fact, inference and unknowns.
4. Create at least six risk statements using asset + threat + vulnerability + impact + existing control.
5. Write a 300-word risk briefing prioritising three actions without claiming evidence that is not present.
6. Underline every claim and mark the source evidence that supports it.

By the end of the session you should have a cyber-risk matrix and evidence-controlled management briefing.

Week 23 Student Resource Pack

Last Updated
2026-09-14 09:27:28