CCPC study materials
CCPC study resources

CCPC case studies

CCPC · Put your knowledge to work in context.

The Certified Cyber Policy Consultant (CCPC) is a professional credential aimed at people who translate cybersecurity requirements into organizational policy rather than configure systems. Typical candidates work in governance, risk, and compliance; policy or legal-adjacent roles; security program management; or public-sector cyber coordination, and need to write, defend, and operationalize policy across an enterprise. The CCPC case studies are 5 cases and about 2,267 words.

1

The 72-Hour Clock and the Unpatched Vendor

A regional hospital network (14 facilities, 9,000 staff) detects ransomware on a billing server at 22:40 Friday. The encryption has begun spreading to a shared drive holding referral records.

485 words, about 2 min
2

Cross-Border Telemetry and the Data Localization Squeeze

A cloud SaaS provider headquartered in Country A serves enterprise customers in Country B. Its security operations center in Country A ingests logs, including IP addresses, device identifiers, and some employee names, from Country B customers for threat detection.

499 words, about 2 min
3

The Information-Sharing Cooperative That Shares Too Much

A cross-sector information sharing and analysis organization (ISAO) with 240 members runs a threat-intelligence platform. Members upload indicators of compromise, incident narratives, and sometimes raw packet captures.

421 words, about 2 min
4

AI Triage in a Regulated Lending Pipeline

A mid-sized lender deploys a third-party AI model to triage loan applications, flagging 'high-risk' files for manual review. The model is trained on five years of historical decisions.

427 words, about 2 min
5

The Allied Request to Disable a Botnet Node

A national CERT learns that a botnet is using compromised routers inside its territory to attack a partner country's banks. The partner country requests that the CERT 'take down' the routers - meaning remotely disable them - without notifying the device owners, many of whom are small businesses and one of which is a hospital's outpatient clinic.

435 words, about 2 min