SCLE Module 17 study guide
SCLE Module 17 · Work through your exam, one topic at a time.
SCLE Module 17 is a single-module multiple-choice examination covering six domains: foundational concepts and terminology; governance, risk, and compliance; architecture, design, and implementation; operations and incident response; monitoring, testing, and assurance; and professional practice and ethics. The weighting is inferred rather than confirmed, so treat the domain percentages as a study-planning heuristic, not an official blueprint. The SCLE Module 17 study guide has 6 sections and about 2,005 words.
01Foundational Concepts and Terminology
This domain tests whether you can use security vocabulary precisely under pressure - not recite definitions, but classify a live situation into the correct term and then act on that classification. Asset, threat, threat actor, vulnerability, exposure, likelihood, impact, risk, residual risk.
326 words, about 2 min02Governance, Risk, and Compliance
This domain tests how security is directed and evidenced: who decides, what the rules are, how risk is recorded and treated, and how you prove compliance without pretending compliance equals security. Policy: management intent, mandatory, stable, e.g.
338 words, about 2 min03Architecture, Design, and Implementation
This domain tests secure-by-design reasoning: deriving controls from principles, modelling threats before code exists, and knowing exactly where trust boundaries sit. Least privilege, separation of duties, defense in depth, fail-safe defaults (deny on error), complete mediation, economy of mechanism, open design, psychological acceptability - the Saltzer and Schroeder set, still examinable.
337 words, about 2 min04Operations and Incident Response
This domain tests whether you can keep services running and handle a live intrusion without destroying the evidence you will need later. Change and configuration management against documented baselines; maintain a CMDB; patch on severity-based SLAs.
311 words, about 2 min05Monitoring, Testing, and Assurance
This domain tests how you know controls actually work: what you log, what you test, how you sample, and how you report without overclaiming. Centralised logging with NTP time sync, defined retention, and integrity protection.
352 words, about 2 min06Professional Practice and Ethics
This domain tests judgement under ambiguity: scope, authorization, confidentiality, conflicts of interest, and disclosure. Answers are graded on the process you follow, not only the technical outcome.
341 words, about 2 min