OpenCyber AcademyLesson map
Lesson 12 published. Map, example, EX056.
flowchart TD
N0["Learning outcomes"]
N1["12.1 Reviewing the whole"]
N2["12.2 Transfer"]
N3["12.3 Continuing development"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4
N4 --> EX["Worked example"]
EX --> Q["Exercise EX056"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["12.1 Reviewing the whole"]
N2["12.2 Transfer"]
N3["12.3 Continuing development"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX056"]
[Learning outcomes]
|
v
[12.1 Reviewing the whole]
|
v
[12.2 Transfer]
|
v
[12.3 Continuing development]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX056]
Learning outcomes
You will (1) review the programme's development as a whole; (2) transfer lessons to other contexts; (3) plan continuing professional development.
12.1 Reviewing the whole
Daniel reviews the two years at Calloway. The programme shifted from simulations and click rankings to reporting, fast feedback, verification controls and security keys, governed by a charter and a panel including staff representatives. Outcome measures improved: faster reporting, more malicious emails reported and fake payment changes caught. Burden fell slightly. He also lists what did not work, such as an early champion scheme that collapsed when champions had no time allocated. A whole review shows how parts interacted over time.
12.2 Transfer
Daniel considers how lessons transfer. A small charity would lack a security team, so the core ideas, easy reporting, kind feedback, verification for payments and strong authentication, would need simpler forms. A hospital would face clinical time pressure, making burden even more important. He writes a short transfer guide that separates principles from Calloway-specific details. Transfer requires distinguishing why something worked from how it was done, since the how often depends on local resources and culture. He tests the guide with a peer from a charity.
12.3 Continuing development
Daniel plans continuing development: reading new evidence each quarter, including the annual DBIR and new studies; joining a peer group of security managers; and mentoring a junior colleague in human-centred methods. Dr Holm suggests he write a short practitioner article about the stepped evaluation, since practice-based evaluations are rare in the literature. He notes that the field changes quickly as attackers adapt, so his own learning must continue well beyond the course. He also blocks two hours each month in his calendar for reading and reflection.
Worked example
Daniel reviews the whole programme, writes a transfer guide separating principles from local details and plans continuing development.
Synthetic case. The review is synthetic; the DBIR is real.
Errors and limits
Reviews can be self-serving. Transfer guides oversimplify.
Exercises
- EX056 — Programme shift. What did the programme shift from and to?
Show marking criteria
Rubric: 3 = from simulations and rankings to reporting, feedback, verification and keys;; 2 = shift;; 1 = vague;; 0 = none. - EX057 — Failed scheme. What early scheme failed and why?
Show marking criteria
Rubric: 3 = champions without allocated time;; 2 = time;; 1 = vague;; 0 = none. - EX058 — Hospital difference. What would matter more in a hospital?
Show marking criteria
Rubric: 3 = burden, due to clinical time pressure;; 2 = burden;; 1 = vague;; 0 = none. - EX059 — Transfer distinction. What must transfer distinguish?
Show marking criteria
Rubric: 3 = why something worked from how it was done;; 2 = principle;; 1 = vague;; 0 = none. - EX060 — Article suggestion. What article did Dr Holm suggest?
Show marking criteria
Rubric: 3 = on the stepped evaluation;; 2 = evaluation;; 1 = vague;; 0 = none.
Synthesis
Final review connects the parts, separates principles from details and commits to continued learning.
Continue studying — chapter 12 of 12
← Chapter 11 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →