Description.
Part B: Student Challenge (The Graduation Defense) Task: Present your “Authorization Package” and complete a mock interview. Step 1: The Executive Briefing. Create a 5-slide presentation summarizing your work from Modules 1-11. Slide 1: System Name & Categorization. Slide 2: Major Security Controls implemented. Slide 3: Top findings from the SAR audit. Slide 4: The […]
Part B: Student Challenge (The Renovation Check) Task: Perform a Security Impact Analysis for the new database. Step 1: Identify Affected Controls. Look at your NIST 800-53 catalog. Which rules apply to a new database? (Hint: Think about AC for Access and MP for Media Protection). Step 2: Fill out the SIA Form. Description of […]
Part B: Student Challenge (The Final Assembly) Task: Compile your artifacts and draft the “Permission Request” for the AO. Step 1: The Executive Summary. Write a 5-sentence summary of the “Juvibolt-Connect” system’s security health. Step 2: The RAR (Risk Assessment Report). List the 2 most dangerous risks remaining and explain why it is still “safe […]
Part B: Student Challenge (The POA&M Builder) Task: Given a mock SAR with 10 findings, you must build an audit-ready POA&M Spreadsheet. Step 1: Open the Juvibolt POAM Template (Excel). Step 2: For each of the 10 findings, fill out the mandatory columns: Weakness Description: What is broken? Point of Contact: Who will fix it? […]
Part B: Student Challenge (The Response Playbook) Task: Draft a simplified System Incident Response Plan (IRP) for Juvibolt-Connect. Step 1: The Severity Matrix. Create a small table that defines what a “Low,” “Medium,” and “High” incident looks like for your system. Step 2: The Call Tree. Create a list of who must be called and […]
Part B: Student Challenge (The Emergency Kit) Task: Conduct a Business Impact Analysis (BIA), draft a simplified ISCP, and design a Tabletop Exercise. Step 1: The BIA Worksheet. Fill out the provided Juvibolt BIA form for “Juvibolt-Connect.” – Set an RTO (How fast to fix it?) and an RPO (How much data can we […]
Part B: Student Challenge (The Executive Summary) Task: Review the provided “Mock Scan Report” and “STIG Benchmark” and write a 1-page Technical Compliance Summary. Step 1: Look at the report and list the top 3 most dangerous vulnerabilities (Look for the highest CVSS scores). Step 2: Identify one “False Positive” and explain why we don’t […]
STUDENT CHALLENGE Part B: Student Challenge Task: Author two complete, audit-ready procedures for “Juvibolt-Connect”: Account Management & Access Removal SOP: (How do we fire someone safely?) Configuration Change Control SOP: (How do we ask permission to change a password rule?) Submission: Upload your 15 Implementation Statements and your 2 completed SOPs. Reflect: If an Auditor […]
Part B: Student Challenge (Drafting Your First Blueprint) Task: Populate the first parts of your System Security Plan (SSP) and draft an ISA. Step 1: Open the Juvibolt SSP Template. Step 2: Fill out Sections 1–3 for the “Juvibolt-Connect” app. Hint: For the “Environment,” describe it as a “Cloud-hosted system on AWS.” Step 3: Use […]
Part B: Student Challenge (Drafting the FIPS 199 Document) Task: You must calculate the “High-Water Mark” and draft a formal Security Categorization Document. Step 1: Review your system data types: Public News Feed (Confidentiality: Low, Integrity: Low, Availability: Low) Employee Payroll Info (Confidentiality: Moderate, Integrity: Moderate, Availability: Low) Step 2: Calculate the High-Water Mark. What […]
