- This topic has 3 replies, 2 voices, and was last updated 3 months ago by
.
- Posts
Hello
(b) Draft a briefing paper to the board that evaluates the four security layers in NCTech’s IT
security manual and recommends any further security controls that should be put in
place to minimise the risk of a future data breach.This seems a straight forward quetsion and easy to answer but the trick which I faced when I compared my answer to the model answer.
The model answer always relate the answer to the case by saying because the breach has happen it seem that the security layer was not properly working.
Wherase in my answer even I was evaluating the current layers and recommending new ones like there should be a cyber security system but I was not relating to what has happened in the data breaches.
So from the qustion it is not understood that I have to refer to the case and what has happend of the data breaches .
So Can I say that even if the qusetion has not said that I should think about what breaches happened I have to always answer any quetion in SBL by linking it to the case even if the question was not pointing out to that.
Thanks.
Absolutely. The examination team has spent days writing and reviewing the question and has deliberately included a problem ie the security breach. In general, questions should not be answered theoretically if there is something in the carefully constructed question that raises issues, questions or problems. To evaluate the security layers without reference to the breach that has occurred is not the right approach.
Think of yourself not as an examination candidate but as a consultant or expert who is to give a real, practical ‘report’. You wouldn’t last long presenting to the board if you ignored the real problem that happened.
- The topic ‘Nctech Task 1( b) Security layers’ is closed to new replies.