C-ACYFSW study materials
C-ACYFSW study resources

C-ACYFSW case studies

C-ACYFSW · Put your knowledge to work in context.

C-ACYFSW is an independent certification-style exam focused on applied cybersecurity resilience and secure operations. It is aimed at practitioners who sit between hands-on engineering and program-level decision making: security analysts moving toward architecture roles, IT and cloud administrators who own hardening and recovery duties, risk and compliance staff who need technical fluency, and team leads accountable for keeping services running under attack. The C-ACYFSW case studies are 5 cases and about 2,922 words.

1

Ransomware During Peak Enrollment at a Regional College

A community college with 9,000 students is hit by ransomware three days before fall registration closes. The infection started on a print server and spread to two file shares holding enrollment records.

657 words, about 3 min
2

Third-Party SaaS Aggregator With Inherited Access

A mid-size insurer uses a benefits-administration SaaS platform that, in turn, relies on a subcontractor for document OCR. The subcontractor stores scanned claim documents in a cloud bucket in a different country.

574 words, about 3 min
3

Zero Trust Rollout vs. a Flat Legacy Network

A hospital system with 14 facilities runs a flat internal network: clinical workstations, MRI scanners, infusion pumps, and administrative PCs all share one VLAN. The CISO proposes a zero trust program centered on microsegmentation and identity-aware proxies.

550 words, about 3 min
4

Detection Gap After a Logging Budget Cut

A payments processor cut its SIEM ingestion budget by 40 percent after a cost review. To stay within budget, the security team dropped Windows process-creation logs, DNS query logs, and firewall deny logs, keeping authentication logs and endpoint alerts.

583 words, about 3 min
5

AI Coding Assistant Rollout in a Regulated Bank

A bank with 3,000 developers pilots an AI coding assistant. Within two weeks, developers report it suggests plausible but subtly wrong API calls, and several pull requests include generated code that passed review because reviewers trusted the tool.

558 words, about 3 min