Cybersecurity · Intermediate level

Intermediate level · Module 6 of 6 · 17 guided hours

Small Organisation Security Assessment

Assess an organisation against essential safeguards, with permission, and recommend improvements.

Learning objectives

  • Scope an assessment with written permission
  • Assess safeguards with evidence
  • Report prioritised, affordable recommendations

Topics

  • scope and permission
  • CIS Controls essential safeguards
  • asset inventory
  • evidence collection
  • risk rating
  • reporting

Lessons

  1. Lesson 1 Scoping and Permission

    Agree exactly what will be assessed and get written permission.

    scopepermission letterconfidentialityrules of engagement

  2. Lesson 2 Assessing Essential Safeguards

    Check the organisation's practice against essential safeguards and collect evidence.

    CIS Controlsasset inventoryevidenceconfiguration review

  3. Lesson 3 Reporting and Prioritising Improvements

    Turn findings into a clear, prioritised plan the organisation can afford.

    risk ratingquick winsexecutive summaryimprovement roadmap

Practical activity

Complete the Small Organisation Security Assessment level project.

Expected outcomes

  • A professional, evidence-based assessment
  • A prioritised improvement plan

Assessment

Level project assessed against its criteria.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.