Advanced level · Module 6: Capstone: Organisational Security Programme · Lesson 1 of 5
Scoping and Assessment
Agree the scope and assess the organisation's current position.
In this lesson you will
- Scope the capstone with permission
- Produce current profile and risk register
Key concepts
scopepermissioncurrent profilerisk register
The lesson
Agree scope and permission in writing, as in the Intermediate project, including what may be reviewed and who will be interviewed.
Assess the organisation against CSF 2.0 outcomes, using interviews, observation and configuration review — never attack techniques.
Build the risk register from the evidence.
Step by step
- Sign the scope.
- Interview key staff.
- Complete the current profile.
- Build the risk register.
Practice activity
Complete the assessment phase of the capstone.
Expected result: A current profile and risk register based on evidence.
Check your understanding
-
Which assessment methods are allowed?
Show answer
Interviews, observation and configuration review within scope.
-
What links assessment to the plan?
Show answer
The risk register and profile gaps.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.