SCLE Module 17 study plan

Define the core vocabulary of the exam (control, risk, threat, vulnerability, asset, likelihood, impact, residual risk) in your own words and match each term to a scenario

Map the governance layer: policy, standard, procedure, guideline, and baseline, and state who typically approves each

Build a risk register with eight realistic entries, scoring each on likelihood and impact and justifying the score

Classify five controls by type (preventive, detective, corrective, compensating) and by category (technical, administrative, physical)

Walk through a full risk assessment cycle from asset identification to treatment decision, and document the accept/mitigate/transfer/avoid choice for each register entry

Distinguish the obligations created by common regulatory and standards frameworks at a conceptual level, and list what evidence each typically demands

Draft a control-to-framework mapping table showing where one control satisfies multiple requirements

Identify three situations that create a conflict of interest or an independence problem in a compliance role and state the correct response

Diagram a reference architecture with trust boundaries marked, and annotate where authentication, authorization, and logging occur

Explain defense in depth and least privilege using your own diagram, and identify two places where the design violates least privilege

Compare three data protection approaches (encryption at rest, tokenization, masking) and select one for each of four data flows with justification

Describe how identity, credential, and session management decisions affect the rest of the architecture

Translate the architecture from week 3 into an implementation checklist of at least fifteen configuration items

Write secure configuration requirements for logging, access control, and change management that a builder could act on

Draft a change management workflow with approval gates and rollback criteria

Prepare a pre-deployment review checklist that catches the five most common design-to-implementation gaps

Build an incident response plan covering preparation, detection, containment, eradication, recovery, and lessons learned, with named roles for each phase

Write three tabletop injects based on your week 3 architecture and record the decisions each inject forces

Define escalation thresholds and notification obligations, including who must be told and within what timeframe

Connect incident evidence handling to the compliance and legal obligations identified in week 2

Design a monitoring plan that names the specific events to log, the alert thresholds, and the owner for each alert

Select assurance activities (vulnerability assessment, penetration test, configuration audit, control self-assessment) for four scenarios and justify each choice

Write five test procedures that produce pass/fail evidence rather than opinion

Explain how monitoring findings feed back into incident response and risk treatment

Interpret a sample set of audit findings and write a management response for each, including remediation owner and date

Distinguish assurance, audit, and assessment, and state when each is appropriate

Apply the professional practice obligations of due care, confidentiality, objectivity, and scope discipline to four short ethical scenarios

Identify the correct action when asked to sign off on evidence you did not personally verify

Synthesize all prior deliverables into a single cross-referenced study summary organized by domain

Re-derive the weakest ten concepts from memory and correct them against your notes

Complete two timed mixed-domain practice sets and categorize every miss by domain and by cause (knowledge gap, misread, or guess)

Write a one-page exam-day strategy covering pacing, question triage, and how you will handle unfamiliar terminology