SCLE Module 17 case studies
SCLE Module 17 · Put your knowledge to work in context.
SCLE Module 17 is a single-module multiple-choice examination covering six domains: foundational concepts and terminology; governance, risk, and compliance; architecture, design, and implementation; operations and incident response; monitoring, testing, and assurance; and professional practice and ethics. The weighting is inferred rather than confirmed, so treat the domain percentages as a study-planning heuristic, not an official blueprint. The SCLE Module 17 case studies are 5 cases and about 4,565 words.
1Segmentation Decision for a Legacy Payments-Capable ERP
Northline Retail runs a 14-year-old on-premise ERP that processes card data for 212 stores. The ERP sits on the same flat VLAN as point-of-sale controllers, back-office file shares and a Windows Server 2008 print server.
930 words, about 5 min2A SaaS Processor's Late Breach Disclosure
Vantage Freight, with 3,400 staff and 22 distribution centres, outsources its transport management system to LogiCore, a SaaS provider that also handles customs filings and driver records for 61,000 carriers. On 3 March LogiCore tells Vantage that intruders accessed a storage bucket between 12 and 21 February; the provider detected the intrusion on 24 February and disclosed on 3 March, nine days after discovery.
890 words, about 4 min3Ransomware at a Manufacturer with a Live Furnace
Crestline Manufacturing runs six plants and 2,100 endpoints on a single Active Directory forest. At 02:14 on a Tuesday the EDR console raises credential dumping on a plant engineering workstation, followed by SMB lateral movement; by 05:00 forty servers are encrypted, including ERP and the manufacturing execution system.
894 words, about 4 min4A Reassurance Programme That Reassures Nobody
Halcyon Bank's security operations centre has 11 analysts and ingests around 4,000 alerts a day. Its quarterly dashboard reports 92% patch compliance, a mean time to detect of 9.2 days for 'non-critical' incidents, and 61% coverage of MITRE ATT&CK techniques against its detection use cases.
919 words, about 5 min5The Finding the Client Wants Removed
You lead fieldwork at an advisory firm engaged by Meridian Payments, a mid-size card processor, to assess PCI DSS compliance ahead of a sponsor-bank review. In a SIEM export you find log entries showing an engineer copying a 1.8 GB archive from the cardholder data environment to a personal cloud account four months ago, then deleting the local copy.
932 words, about 5 min