SCLE Module 6 study plan

Define every term in the CIA triad, governance, and risk-management vocabulary in your own words and map each to a concrete organizational example.

Construct a risk register with at least eight risks, assigning likelihood, impact, and an explicit treatment choice (mitigate, transfer, avoid, accept) for each.

Differentiate policies, standards, procedures, and guidelines by writing one short example of each for a fictional company.

Explain how security strategy aligns with business objectives and legal/regulatory obligations, citing at least three obligation types.

Compare BCP, DRP, and incident response planning by listing the trigger, owner, and output of each.

Calculate RTO, RPO, MTD, and MTBF for a sample system and justify each figure.

Sequence the phases of an incident response lifecycle and assign a responsible role to each phase.

Classify at least ten security controls as preventive, detective, corrective, or compensating and as administrative, technical, or physical.

Describe the fundamental security models (Bell-LaPadula, Biba, Clark-Wilson, Brewer-Nash) and state the threat each addresses.

Explain the cryptographic lifecycle: symmetric vs asymmetric, hashing, digital signatures, PKI, and key management, and select an appropriate algorithm family for three given scenarios.

Identify physical and environmental controls for a data center and explain the failure mode each mitigates.

Distinguish evaluation criteria and certification concepts (Common Criteria, assurance levels) and describe how they inform procurement.

Map the OSI and TCP/IP layers and state the security controls and attacks relevant at each layer.

Explain the security implications of core protocols (IPsec, TLS, DNS, DHCP, ARP, BGP) and identify at least one mitigation for each weakness.

Design a segmented network with VLANs, DMZs, and firewall zones and justify the placement of each asset.

Compare network attack types (spoofing, sniffing, DoS, MITM, on-path) and match each to a detection method.

Compare identification, authentication, authorization, and accountability and give an example of each in a single login flow.

Evaluate authentication factors, MFA designs, and federation standards (SAML, OAuth 2.0, OIDC) for three business scenarios.

Explain access control models (DAC, MAC, RBAC, ABAC) and choose one for a given organization with justification.

Describe identity lifecycle management including provisioning, review, and deprovisioning, and identify the risks of stale accounts.

Distinguish vulnerability assessment, penetration testing, and audit, and state the output and audience of each.

Design a testing program that includes code review, static and dynamic analysis, fuzzing, and synthetic monitoring, and state the frequency of each.

Apply data classification and handling requirements to a set of sample data types and define retention and destruction rules.

Explain the purpose of metrics and reporting in security assessment and draft three meaningful KPIs.

Describe logging, monitoring, and SIEM use cases and design three detection rules with their alert thresholds.

Explain change management, configuration management, and patch management and identify the security risk of skipping each.

Apply secure coding principles (input validation, output encoding, least privilege, error handling) to a short code review exercise.

Identify common software vulnerabilities and their mitigations, and explain how SDLC phase gates reduce them.

Complete two full-length timed practice exams and record per-domain accuracy.

Re-study the two weakest domains using targeted notes and re-test each with at least 20 questions.

Build a one-page formula and concept sheet covering risk, availability, cryptography, and network terms.

Simulate exam-day pacing and review every missed question until you can explain why the correct answer is right and each distractor is wrong.