◇ OpenCyber Academy
Engineering · Chapter 50 · English

Chapter 50 — Final defense

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 50 — Final defense

Lesson map

Lesson 50 published. Map, example, EX148.

flowchart TD
  N0["Learning outcomes"]
  N1["50.1 Presentation"]
  N2["50.2 Questions"]
  N3["50.3 Reflection"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX148"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["50.1 Presentation"]
  N2["50.2 Questions"]
  N3["50.3 Reflection"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX148"]
[Learning outcomes]
    |
    v
[50.1 Presentation]
    |
    v
[50.2 Questions]
    |
    v
[50.3 Reflection]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX148]

Learning outcomes

You will (1) defend an engineering thesis in GRC; (2) answer questions on design, evidence and ethics; (3) reflect on professional development.

50.1 Presentation

Nadia presents her thesis in twenty minutes: the problem at Ardwell, the design, how reviews and trials improved it, results against criteria and the board study with its limits. She shows a short demonstration of an alert for a failed control and of the integrity check detecting a changed file. She closes with lessons for other organisations. Examiners include Prof. Brenner, an external engineer from a utility and an internal auditor from another sector. The integrity check demonstration ties back directly to the altered test results file she found in her dossier.

50.2 Questions

The external engineer asks whether automation might make owners complacent. Nadia answers that the service collects evidence but owners still review exceptions, and that sampling by the analyst continues. The auditor asks whether the evidence would satisfy an external audit. She answers that it supports one but does not replace the auditor's own testing. Prof. Brenner asks about ethics. She explains how she handled access to staff data and why the failure trial was announced and excluded production control systems. Her answer on audit reflects the distinction between supporting evidence and the auditor's own testing that she drew in chapter 38.

50.3 Reflection

The examiners pass the thesis and praise the honest treatment of the board study. In her reflection, Nadia notes that the course taught her to see governance as engineering: requirements, design, verification, operation and improvement. She also learned that governance depends on people, trust and clear communication. She plans to join Ardwell's governance team and to keep her habits of testing assumptions, recording decisions and reporting uncertainty honestly in every role she takes on. Her plan to join the governance team means the monitoring service she handed over will stay in reach of its designer.

Worked example

Nadia presents and demonstrates her service, answers on complacency, audit reliance and ethics and passes her defense.

Synthetic case. The defense is synthetic.

Errors and limits

Defenses sample knowledge. Reflections can be idealised.

Exercises

Synthesis

The defense confirms that governance engineering joins technical rigour with honest communication.

Continue studying — chapter 50 of 50

← Chapter 49 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →