Chapter 35 — Placement | Bachelor's Information security

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 35 — Placement

Lesson map

Lesson 35 published. Map, example, EX103.

flowchart TD
  N0["Learning outcomes"]
  N1["35.1 The placement"]
  N2["35.2 Confidentiality"]
  N3["35.3 Contributions"]
  N4["35.4 Reflection"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX103"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["35.1 The placement"]
  N2["35.2 Confidentiality"]
  N3["35.3 Contributions"]
  N4["35.4 Reflection"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX103"]

[Learning outcomes]
    |
    v
[35.1 The placement]
    |
    v
[35.2 Confidentiality]
    |
    v
[35.3 Contributions]
    |
    v
[35.4 Reflection]
    |
    v
[Worked example] --> [Exercise EX103]

Learning outcomes

You will (1) apply learning in a workplace; (2) handle confidential information; (3) reflect on professional development.

35.1 The placement

Aisha spends twelve weeks working in Ashfield's IT team. She helps with daily alert reviews, the quarterly access review and preparation for the managed detection trial. She sees how much of security work involves communication: explaining requests to branch staff, coordinating with suppliers and writing reports. Dr. Carrow visits mid-placement and asks what surprised her. She answers that technical problems were easier than persuading people to change routines. She keeps a weekly diary of tasks and lessons, which she later uses to write her placement reflection.

35.2 Confidentiality

During the placement, Aisha sees real member information and real security weaknesses. She signs a confidentiality agreement and keeps her course work based only on synthetic data. When a friend asks about Ashfield's security, she declines to discuss it. She learns that trust in security staff depends on discretion, and that sharing even general weaknesses could help attackers target the organisation. At the end of the placement, she returns her access badge, confirms her accounts are disabled and deletes any work notes stored on her personal devices, as the agreement requires.

35.3 Contributions

Aisha contributes a simplified access review procedure, reducing the time the IT manager spends on quarterly reviews by organising data before meetings with owners. She also writes a guide for branch staff on reporting suspicious calls. The IT manager adopts both. She learns that small, practical improvements are often valued more than ambitious proposals that require major investment. The access review procedure cuts the IT manager's preparation time noticeably, because owners receive sorted lists in advance and can confirm most entries before the meeting rather than during it. The reporting guide is pinned in every branch staff room.

35.4 Reflection

Aisha's placement reflection notes three lessons: security depends on relationships across the organisation, documentation saves time later and small organisations need simple controls they can sustain. She also notes skills to develop: confidence in presenting to senior managers and deeper knowledge of cloud services. Dr. Carrow suggests she choose a dissertation topic connected to her placement experience. She also writes about a moment when she disagreed with the IT manager about prioritising a finding, and how listening to his reasons about branch workloads changed her view. Dr. Carrow says this kind of reflection shows professional maturity.

Worked example

Aisha works in Ashfield's IT team, keeps real details confidential, contributes a simpler access review procedure and a reporting guide and reflects on lessons and skills.

Synthetic case. The placement is synthetic.

Errors and limits

Sharing an employer's weaknesses, even casually, can help attackers.

Exercises

EX103 — Placement surprise. What surprised Aisha most? Rubric: 3 = persuading people was harder than technical problems;; 2 = partly correct;; 1 = vague;; 0 = none.
EX104 — Placement contribution. Name one contribution Aisha made. Rubric: 3 = simplified access review procedure;; 2 = one;; 1 = vague;; 0 = none.
EX105 — Skill to develop. Name one skill Aisha wants to develop. Rubric: 3 = presenting to senior managers;; 2 = one;; 1 = vague;; 0 = none.

Continue studying — lesson 35 (chapter 35 of 40)

← Chapter 34 · Course chapter index · Chapter 36 →

Continue to the next authored lesson.