ECF-GSF Core case studies
ECF-GSF Core · Put your knowledge to work in context.
ECF-GSF Core (Global Security Fundamentals Core) is an entry-level cybersecurity certification built around seven weighted domains: security fundamentals and risk management, network security and architecture, identity and access, data protection and cryptography, endpoint/application/cloud security, security operations and incident response, and governance, compliance and cyber law. It suits career-changers, junior analysts, IT generalists and students who need a single credential proving broad, vendor-neutral literacy before specialising. The ECF-GSF Core case studies are 5 cases and about 4,620 words.
1Ransomware Investment Case Under a Hard Risk Appetite
Northwind Freight is a 1,150-employee logistics operator with three depots and 180M revenue. Its cyber insurance policy has a 5M limit, a 500k retention and a 1.5M ransomware sublimit, and it requires phishing-resistant MFA for remote access as a condition of cover.
902 words, about 5 min2PCI Segmentation With an Unpatchable Imaging Server
Riverbend Health Partners runs 14 outpatient clinics under one /16 (10.20.0.0/16), about 1,900 hosts, connected over an MPLS L2VPN. Payment kiosks (38), clinical workstations and a CT scanner control server sit on the same flat VLAN at each site.
962 words, about 5 min3MFA Fatigue, Service Accounts and Break-Glass in a Hybrid Estate
Meridian Public Services has 2,400 staff on hybrid Active Directory and Entra ID. All users are licensed for Microsoft Authenticator push, but number matching is not enabled.
915 words, about 5 min4Erasure by Key Deletion in a Multi-Region SaaS
CareLoop is a SaaS provider for 900 clinics, storing records for 40 million patients in AWS us-east-1 and eu-central-1. Each tenant's objects live under an S3 prefix and are encrypted with a per-tenant data key wrapped by a regional KMS CMK.
877 words, about 4 min5Ransomware at a Manufacturer With Shared AD and OT
At 02:14 on a Tuesday, an EDR alert reports six Windows servers encrypting files at Halden Metalworks, a 900-employee manufacturer with three plants. The domain admin account used appears in 40 authentication events across two plants.
964 words, about 5 min