Chapter 4 — Advanced risk and ethics

Lesson map

Lesson 04 published. Map, example, EX016.

flowchart TD
  N0["Learning outcomes"]
  N1["4.1 Long-lived confidentiality"]
  N2["4.2 Risk scenarios"]
  N3["4.3 Ethical duties"]
  N4["4.4 Supplier weakness disclosure"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX016"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["4.1 Long-lived confidentiality"]
  N2["4.2 Risk scenarios"]
  N3["4.3 Ethical duties"]
  N4["4.4 Supplier weakness disclosure"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX016"]

[Learning outcomes]
    |
    v
[4.1 Long-lived confidentiality]
    |
    v
[4.2 Risk scenarios]
    |
    v
[4.3 Ethical duties]
    |
    v
[4.4 Supplier weakness disclosure]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX016]

Learning outcomes

You will (1) assess risk for long-lived confidential data; (2) weigh ethical duties to partners and customers; (3) decide on disclosure of cryptographic weaknesses in supplier products.

4.1 Long-lived confidentiality

Some Corvane data must stay confidential for decades: customs records, contracts and customer identities. Leila applies a simple test from post-quantum planning literature: if data must remain secret for x years, migration takes y years and a cryptographically relevant quantum computer might appear in z years, then x plus y greater than z signals risk now, because recorded traffic could be decrypted later. She estimates x at fifteen years for contracts and y at three, but treats z as deeply uncertain, presenting scenarios rather than a single date. The test identifies which data flows deserve hybrid key exchange first.

4.2 Risk scenarios

Leila writes three scenarios for the board: slow progress, where large quantum computers remain decades away; moderate, around fifteen years; and fast, under ten. For each she shows exposure of recorded EDI and finance traffic, migration cost and residual risk. Rather than predicting, she asks the board to choose a planning scenario that matches its risk appetite. The board chooses moderate with a review every two years. This turns an unknowable date into a governed assumption, consistent with Chapter 1's separation of assumptions from facts.

4.3 Ethical duties

Corvane holds data belonging to customers and partners who cannot see its security choices. Leila argues that this creates duties beyond compliance: to protect data proportionately, to tell partners when shared systems are weak and to avoid shifting risk onto those least able to bear it. One example is the legacy EDI platform, where small partners still use old clients; forcing an abrupt cut-off would harm them, while waiting indefinitely exposes everyone. She proposes a supported transition with free updated client software and a firm, published deadline.

4.4 Supplier weakness disclosure

During testing, Leila's team finds that a port terminal vendor's controller accepts firmware signed with a deprecated algorithm. She follows Corvane's coordinated disclosure policy: report privately to the vendor, agree a fix timeline, apply compensating controls such as network isolation, and inform other affected customers through the vendor once a fix exists. She does not publish details or test beyond Corvane's authorised lab. The episode becomes a teaching case on balancing transparency with the risk of helping attackers before fixes ship.

Worked example

Leila applies the x + y > z test to contracts, presents three quantum scenarios for board choice, proposes a supported EDI transition and handles a vendor firmware weakness through coordinated disclosure.

Synthetic case. Scenarios and the vendor case are invented.

Errors and limits

Quantum timelines are uncertain; scenarios must be revisited. Disclosure without a fix can endanger other customers.

Exercises

• EX016 — Planning inequality. State the x + y > z test and its meaning.
  Show marking criteria

  Rubric: 3 = secrecy years plus migration years exceeding years to a quantum computer signals risk now;; 2 = partial;; 1 = vague;; 0 = none.
• EX017 — Board choice. Which planning scenario did the board choose, with what review?
  Show marking criteria

  Rubric: 3 = moderate (about fifteen years), reviewed every two years;; 2 = scenario;; 1 = vague;; 0 = none.
• EX018 — EDI ethics. What transition did Leila propose for small EDI partners?
  Show marking criteria

  Rubric: 3 = supported transition with free updated clients and a firm published deadline;; 2 = partial;; 1 = abrupt cut-off;; 0 = none.
• EX019 — Vendor flaw. What weakness did the team find in the port controller?
  Show marking criteria

  Rubric: 3 = accepts firmware signed with a deprecated algorithm;; 2 = weakness;; 1 = vague;; 0 = none.
• EX020 — Disclosure steps. List the disclosure steps Leila followed.
  Show marking criteria

  Rubric: 3 = private report, agreed fix timeline, compensating controls, vendor informs others after fix;; 2 = three;; 1 = publish;; 0 = none.

Synthesis

Advanced risk work governs uncertain assumptions through scenarios and treats ethical duties to partners as part of cryptographic decisions.

Continue studying — chapter 04 of 12

← Chapter 03 (draft) · Course chapter index · Chapter 05 (draft) →