Chapter 50 — Final defense | Engineering Identity and access management

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 50 — Final defense

Lesson map

Lesson 50 published. Map, example, EX148.

flowchart TD
  N0["Learning outcomes"]
  N1["50.1 Preparing"]
  N2["50.2 Likely questions"]
  N3["50.3 The defense"]
  N4["50.4 Closing the project"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX148"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["50.1 Preparing"]
  N2["50.2 Likely questions"]
  N3["50.3 The defense"]
  N4["50.4 Closing the project"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX148"]

[Learning outcomes]
    |
    v
[50.1 Preparing]
    |
    v
[50.2 Likely questions]
    |
    v
[50.3 The defense]
    |
    v
[50.4 Closing the project]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX148]

Learning outcomes

You will (1) prepare and deliver the final defense; (2) answer questions with evidence; (3) close the project responsibly.

50.1 Preparing

Sana prepares a twenty-minute presentation: the problem, the chosen design and why, key evidence, the applied study, limits and contribution. She rehearses with fellow students acting as examiners, who ask hard questions about choices she now takes for granted. She prepares short answers with page and dossier references for likely questions, such as why a cloud provider, how emergency access is controlled and what happens to legacy applications. Preparation means understanding her own work deeply, not memorising a script. She times each section of the talk.

50.2 Likely questions

Examiners are likely to probe weak points: the reliance on HR data quality, the residual risk from interim controls, the small applied study, the cloud provider dependency and the exclusions of emergency accounts. For each, Sana prepares an honest answer that names the evidence and the limit. She also prepares for broader questions, such as how the design would change for a much larger organisation, answering from principles and from evidence rather than speculation presented as fact. Answers are checked with her supervisor.

50.3 The defense

In the defense, Sana listens fully to each question and answers what was asked, referring to specific evidence. When asked whether attacks fell, she explains that the project did not measure attacks, what it did measure, and how attack-related outcomes could be studied. When asked about HR dependency, she cites the failure trial showing safe behaviour when the feed stopped. Examiners request minor corrections, including a clearer explanation of the availability model, which she notes and agrees to complete. She remains calm and concise.

50.4 Closing the project

After corrections, Sana submits the final thesis and closes her obligations to the council. Exports and working files containing staff data are deleted according to the data agreement, confirmed in writing. The council keeps the dossier, runbooks and test suite. She thanks the identity team, service desk and staff who took part in interviews and studies, and offers a short session summarising lessons. Her final reflection notes that the most lasting outcomes are the processes and evidence the council now owns, not the project itself.

Worked example

Sana delivers a twenty-minute defense, answers questions on attacks, HR dependency and interim controls with evidence, completes minor corrections and closes the project with confirmed data deletion.

Synthetic case. Examiners, questions and outcomes are synthetic.

Errors and limits

Answering a question about an unmeasured outcome with guesses rather than stating what was measured undermines credibility.

Exercises

EX148 — Attack question answer. How does Sana answer whether attacks fell? Rubric: 3 = explains attacks were not measured, what was, and how to study it;; 2 = honest;; 1 = yes;; 0 = none.
EX149 — HR dependency evidence. What evidence does Sana cite on HR dependency? Rubric: 3 = failure trial showing safe behaviour when feed stopped;; 2 = trial;; 1 = vague;; 0 = none.
EX150 — Lasting outcome. What does Sana consider the most lasting outcome? Rubric: 3 = processes and evidence the council now owns;; 2 = processes;; 1 = thesis;; 0 = none.

Synthesis

A well-prepared, evidence-based defense and a responsible close complete the engineering journey.

Continue studying — chapter 50 of 50

← Chapter 49 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →