CISSO case studies

CISSO · Put your knowledge to work in context.

The Certified Information Systems Security Officer (CISSO®) is a Mile2® certification aimed at professionals who own or aspire to the information systems security officer role - the person accountable for governance, architecture oversight, operations, incident response, and compliance alignment inside an organization. Mile2 describes its portfolio, including CISSO®, as university and ANSI/ANAB-aligned certifications built for hands-on, job-ready skills that employers trust, and it positions the certification track as relevant to security analysts, network engineers, IT managers, and executive leaders. The CISSO case studies are 5 cases and about 3,196 words.

Closing an End-of-Life ERP Risk as 'Mitigated'

You are the CISO of a 3,200-employee manufacturer. The ERP that processes roughly $40 million in monthly payments runs on Windows Server 2012 R2, which has been out of vendor support for eleven months; its replacement is funded but will not cut over for fourteen months.

659 words, about 3 min 2

Microsegmentation on a Flat Plant Network

You are the security architect for a manufacturer with two data centers and 1,100 workloads running on a flat Layer 2 network with 42 VLANs. A recent intrusion began on a phished laptop and reached a database server in another VLAN within nine minutes, so the board has mandated microsegmentation.

636 words, about 3 min 3

Ransomware at the Subsidiary Clinic

You are the incident commander for a 14-hospital healthcare network. At 02:10 on Saturday, EDR alerts show ransomware spreading from a subsidiary clinic's file server to two virtualization hosts.

609 words, about 3 min 4

Interim Authorization with a Vendor Carve-Out

You are the security officer for a public benefits agency. The eligibility system serves 1.4 million citizens and holds PII plus law-enforcement-sensitive data.

658 words, about 3 min 5

Privileged Access After the Merger

You are the CISO of a company that has just acquired a European competitor, growing from 9,000 to 14,000 employees. The combined estate has four identity providers, 1,700 privileged accounts, 380 orphaned accounts whose owners have left, and 60 shared local administrator credentials still used by operations.

634 words, about 3 min