SC case studies
SC · Put your knowledge to work in context.
The SC designation is a vendor-neutral certification for security practitioners who want to demonstrate breadth across the full security discipline rather than depth in a single product or platform. It suits security analysts, engineers, administrators, and consultants who already touch several domains in their day-to-day work and want a credential that reflects that range, as well as candidates moving from a narrow technical role into a broader security position. The SC case studies are 5 cases and about 3,200 words.
1The Departed Analyst and the Orphaned Encryption Keys
A mid-size insurer's sole data-encryption analyst resigned abruptly. She personally held the only two copies of the KEK wrapping key: one on a hardware token in her desk drawer, one in a personal password manager.
701 words, about 4 min2The Legacy Protocol on the Merged Network
During a merger, a healthcare acquirer must connect its network to a smaller clinic's flat network. The clinic runs an internal application that authenticates users with a challenge-response protocol over an unencrypted channel; the vendor says a TLS upgrade is 'on the roadmap' but not available for 9 months.
624 words, about 3 min3The MFA Rollout That Locked Out the Night Shift
A logistics company rolls out mandatory MFA for 4,000 warehouse and dispatch staff. The chosen method is push-notification to a smartphone app.
668 words, about 3 min4The Pen Test That Found Nothing (Because It Wasn't Looking)
A fintech's board asks for assurance before a funding round. The security team commissions an external penetration test of the customer web app.
598 words, about 3 min5The Container Image That Shipped a Secret
A SaaS team ships 40 microservices via CI/CD, deploying ~30 times a day. A developer hardcoded a database password into a service's source to 'unblock' a demo, then removed it two commits later.
609 words, about 3 min