Chapter 1 — The practitioner and Moorfield Dental Group | Postgraduate Information security

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 1 — The practitioner and Moorfield Dental Group

Lesson map

Lesson 01 published. Map, example, EX001.

flowchart TD
  N0["Learning outcomes"]
  N1["1.1 The practitioner"]
  N2["1.2 The organisation"]
  N3["1.3 What the course adds"]
  N4["1.4 Learning goals"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX001"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["1.1 The practitioner"]
  N2["1.2 The organisation"]
  N3["1.3 What the course adds"]
  N4["1.4 Learning goals"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX001"]

[Learning outcomes]
    |
    v
[1.1 The practitioner]
    |
    v
[1.2 The organisation]
    |
    v
[1.3 What the course adds]
    |
    v
[1.4 Learning goals]
    |
    v
[Worked example] --> [Exercise EX001]

Learning outcomes

You will (1) describe the practitioner case; (2) identify what a postgraduate course adds to experience; (3) set learning goals linked to workplace problems.

1.1 The practitioner

Elena Petrova has worked in IT for twelve years and now manages IT and security for the fictional Moorfield Dental Group. She enrols in a two-year part-time postgraduate programme in information security at the fictional Thornbury Business School, taught by Dr. Hamid Qureshi. She brings practical skill but little formal training in governance, risk or measurement. Dr. Qureshi explains that the course aims to help experienced practitioners turn their experience into structured, defensible decisions that boards and auditors can follow and challenge.

1.2 The organisation

Moorfield runs twenty-two dental clinics with about six hundred staff and roughly five hundred and seventy computers, tablets and imaging devices. Clinics hold patient records, X-ray images, appointment diaries and payment details. Most clinics have no IT staff; three rely on a part-time local contact. A central team of four, led by Elena, supports everyone. Patients expect confidentiality, and clinics cannot treat patients if systems are unavailable, so both confidentiality and availability matter greatly. Elena's team also manages the central servers and the head office network.

1.3 What the course adds

Elena's experience tells her what usually breaks and how to fix it. The course adds frameworks for deciding what matters most, methods for measuring whether controls work and skills for explaining security to a board of dentists and investors. Dr. Qureshi asks each student to bring one workplace problem to every module. Elena chooses patch delays in small clinics, recurring phishing attempts and unclear recovery plans, which she suspects are connected through the same staffing gaps. She writes each problem at the top of her course notebook.

1.4 Learning goals

Elena writes three learning goals: build a risk-based security programme Moorfield's board can approve, measure the main controls with clear definitions and lead a credible capstone improvement project. Dr. Qureshi asks her to state how she will know each goal is met. She adds evidence for each: a board-approved programme document, a monthly measure set with definitions and a capstone report reviewed by the board. She learns that goals with evidence are easier to pursue and assess. Dr. Qureshi approves the goals and their evidence.

Worked example

Elena enrols, describes Moorfield's twenty-two clinics and four-person team, links course content to three workplace problems and sets learning goals with evidence.

Synthetic case. Elena, Moorfield and Thornbury are synthetic.

Errors and limits

Experience without structured methods makes decisions hard to defend.

Exercises

EX001 — Clinic count. How many clinics does Moorfield run? Rubric: 3 = twenty-two;; 2 = partly correct;; 1 = wrong;; 0 = none.
EX002 — Central team. How large is the central IT team? Rubric: 3 = four people;; 2 = partly correct;; 1 = wrong;; 0 = none.
EX003 — Workplace problems. Name one workplace problem Elena brings. Rubric: 3 = patch delays in small clinics;; 2 = one;; 1 = vague;; 0 = none.
EX004 — Course addition. What does the course add to Elena's experience? Rubric: 3 = frameworks, measurement and board communication;; 2 = partly correct;; 1 = vague;; 0 = none.
EX005 — Goal evidence. What evidence shows the programme goal is met? Rubric: 3 = a board-approved programme document;; 2 = partly correct;; 1 = vague;; 0 = none.

Continue studying — lesson 01 (chapter 01 of 12)

← Course home · Course chapter index · Chapter 02 →

Continue to the next authored lesson.