Chapter 12 — Final review and transfer
Lesson map
Lesson 12 published. Map, example, EX056.
flowchart TD
N0["Learning outcomes"]
N1["12.1 Results against goals"]
N2["12.2 Transfer to operations"]
N3["12.3 Continuing improvement"]
N4["12.4 Personal development"]
N5["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5
N5 --> EX["Worked example"]
EX --> Q["Exercise EX056"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["12.1 Results against goals"]
N2["12.2 Transfer to operations"]
N3["12.3 Continuing improvement"]
N4["12.4 Personal development"]
N5["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX056"]
[Learning outcomes]
|
v
[12.1 Results against goals]
|
v
[12.2 Transfer to operations]
|
v
[12.3 Continuing improvement]
|
v
[12.4 Personal development]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX056]
Learning outcomes
You will (1) review the programme's results against its goals; (2) transfer ownership to business-as-usual teams; (3) plan continuing improvement and personal development.
12.1 Results against goals
At the end of two years Leila reviews results. Legacy-accepting endpoints fell from twenty-five to zero on internet-facing systems; certificates are automated across all units; keys have owners and live in the hybrid architecture; and post-quantum readiness assessments cover every critical system, with pilots of hybrid key exchange on internal services. Two goals slipped: two port controllers await vendor firmware, and internal service inventory remains ninety percent complete. She reports successes and slips with equal clarity. She attaches the metric trends as an appendix.
12.2 Transfer to operations
Programmes end; operations continue. Leila transfers each capability to an owner: the standard to security architecture, inventory and renewals to operations, supplier requirements to procurement and post-quantum planning to a small working group. Each receives documentation, runbooks, metrics and a handover session. She defines what "done" means for transfer: the receiving team runs the process for one quarter without programme help. Two transfers need extra support, which she provides before closing. She keeps a transfer checklist signed by each receiving owner.
12.3 Continuing improvement
Leila writes a continuing-improvement plan: annual review of the standard against new NIST and IETF publications; biennial review of the quantum planning scenario chosen in Chapter 4; quarterly metrics to the risk committee; and a lessons-learned session after any cryptography-related incident. She recommends that the next programme focus on post-quantum migration of signatures for long-lived devices, where vendor dependencies make early action essential. Each element has a named owner and a calendar date, so the plan does not depend on Leila remaining in her role. The risk committee formally adopts it at its next meeting.
12.4 Personal development
In her final postgraduate reflection Leila notes that her technical knowledge mattered most when translating between engineers, executives, lawyers and partners. She lists skills developed: decision framing, evaluation design, negotiation and regulatory communication. She also notes mistakes: underestimating partner support needs and initially presenting assumptions as facts. Prof. Rao advises her to mentor junior architects, since teaching consolidates learning. Leila plans to present the EDI project at an industry forum, sharing lessons without revealing sensitive details. She also schedules a check-in with Prof. Rao in a year.
Worked example
Leila reports zero internet-facing legacy endpoints and full certificate automation, two slipped goals, transfers capabilities with a one-quarter "done" test and writes an improvement plan and personal reflection.
Synthetic case. Results are invented.
Errors and limits
Declaring victory hides slips; report them. Transfers without a test period often fail quietly.
Exercises
- EX056 — Slipped goals. Which two goals slipped? Rubric: 3 = two port controllers awaiting vendor firmware; internal inventory 90 percent complete;; 2 = one;; 1 = vague;; 0 = none.
- EX057 — Transfer done. How is a completed transfer defined? Rubric: 3 = receiving team runs the process one quarter without programme help;; 2 = definition;; 1 = handover meeting;; 0 = none.
- EX058 — Improvement plan. Name three elements of the continuing-improvement plan. Rubric: 3 = three of annual standard review, biennial scenario review, quarterly metrics, post-incident lessons;; 2 = two;; 1 = one;; 0 = none.
- EX059 — Next focus. What should the next programme focus on and why? Rubric: 3 = PQ migration of signatures for long-lived devices, due to vendor dependencies;; 2 = focus;; 1 = vague;; 0 = none.
- EX060 — Leila's mistakes. Which mistakes did Leila acknowledge? Rubric: 3 = underestimating partner support needs and presenting assumptions as facts;; 2 = one;; 1 = vague;; 0 = none.
Synthesis
Closing a programme means honest results, tested transfers, a plan for continuing improvement and reflection that shapes the next leader.
Continue studying — chapter 12 of 12
← Chapter 11 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →