C CLE study plan
C CLE · Give each week a clear focus.
8 weeks · About 6 hours per week
Cybersecurity Law and Legal Fundamentals
Map the four exam domains against your current knowledge and rank your weakest sub-areas in writing
Define the core vocabulary of cybersecurity law: statute, regulation, standard, guidance, and contract term, and explain how each binds an organization differently
Trace the sources of legal authority that shape U.S. cybersecurity obligations, from constitutional and administrative law through state attorneys general enforcement
Distinguish civil, criminal, and administrative liability and identify which applies to common security failures
Your checkpoint
A one-page domain map listing each domain's sub-areas with a self-rated confidence score and three named weak spots to attack in weeks 2 to 7
Cybersecurity Law and Legal Fundamentals
Analyze duty of care and the standard-of-reasonableness tests courts apply to security programs
Compare negligence, breach of contract, and breach of fiduciary duty theories as plaintiffs plead them after a breach
Explain how FTC Act Section 5 unfairness and deception authority has been applied to security practices
Evaluate the role of insurance, indemnity clauses, and limitation-of-liability terms in allocating cyber risk
Your checkpoint
A case-brief style summary of three liability theories with the elements a plaintiff must prove for each and the defenses an organization typically raises
Cybersecurity Compliance and Regulatory Frameworks
Differentiate prescriptive, principle-based, and risk-based regulatory models and give one example framework of each
Outline the structure and core requirements of the NIST Cybersecurity Framework and the NIST risk management approach at a level you can explain from memory
Position ISO/IEC 27001 and SOC 2 as assurance mechanisms and explain what each attests to and to whom
Identify which sectors face sector-specific regulators and what those regulators typically demand
Your checkpoint
A comparison table of at least five frameworks showing issuing body, scope, mandatory or voluntary status, and the evidence an auditor would expect
Cybersecurity Compliance and Regulatory Frameworks
Map contractual security obligations, flow-down requirements, and audit rights in vendor and cloud agreements
Explain how supervisory expectations for financial institutions translate into examination priorities
Trace the compliance lifecycle from scoping and gap assessment through remediation tracking and board reporting
Apply a materiality and proportionality lens when deciding how deep a control must go
Your checkpoint
A mock gap assessment for a fictional mid-size company scoring ten controls against one chosen framework, with prioritized remediation actions and owners
Cyber Incident Response and Breach Notification Law
Build an incident response lifecycle model and assign decision authority at each stage
Distinguish security incident, privacy breach, and reportable event, since notification duties attach to different triggers
Compare breach notification triggers, timing, recipients, and content requirements across representative state statutes and one sector rule
Explain regulator, law enforcement, and affected-individual notification channels and how they interact
Your checkpoint
A decision tree that takes a fact pattern from detection to notification decision, naming the trigger tested at each branch and the deadline that follows
Cyber Incident Response and Breach Notification Law
Draft notification content that satisfies statutory minimums while avoiding admissions and speculation
Analyze how attorney-client privilege and work-product doctrine apply to internal breach investigations and where they can be lost
Evaluate third-party and vendor incident coordination duties, including who notifies whom and under what contract terms
Assess penalties, enforcement patterns, and litigation exposure that follow a failed or late notification
Your checkpoint
A complete notification package for a hypothetical breach: customer letter, regulator filing summary, and internal escalation memo, each checked against a named statutory checklist
Cybercrime, Investigations, and Digital Evidence
Classify the major cybercrime categories and the legal elements that distinguish them
Explain jurisdictional reach and cross-border cooperation mechanisms available to investigators
Describe chain-of-custody, preservation, and spoliation duties for digital evidence in civil and criminal matters
Evaluate admissibility questions for digital evidence, including authentication and hearsay exceptions
Your checkpoint
An evidence-handling protocol covering identification, collection, preservation, and documentation for one scenario, with the legal basis cited for each step
Cybersecurity Law and Legal Fundamentals & Cybersecurity Compliance and Regulatory Frameworks & Cyber Incident Response and Breach Notification Law & Cybercrime, Investigations, and Digital Evidence
Synthesize the four domains into one integrated scenario spanning compliance design, incident response, notification, and investigation
Diagnose and close your three weakest sub-areas recorded in week 1
Practice timed question sets across all domains and review every miss for the underlying rule, not just the answer
Consolidate a personal one-page rule sheet of deadlines, triggers, and framework names you must recall cold
Your checkpoint
A full-length timed practice exam with a written error log that maps each missed question to a domain and states the corrected rule in one sentence
Milestones
Week 2: You can explain, without notes, the elements of at least three liability theories and which regulator or statute underpins each
Week 4: You can name five frameworks and state for each whether it is mandatory or voluntary, who issues it, and what evidence proves compliance
Week 6: Given a new fact pattern, you correctly identify the notification trigger, the deadline, and the recipients within five minutes
Week 8: Your timed practice score is at or above your target pass margin in every domain, with no domain below 70 percent