Chapter 12 — Practice portfolio and final review

Lesson map

Lesson 12 published. Map, example, EX056.

flowchart TD
  N0["Learning outcomes"]
  N1["12.1 The portfolio"]
  N2["12.3 Continuing development"]
  N3["Synthesis"]
  N0 --> N1 --> N2 --> N3
  N3 --> EX["Worked example"]
  EX --> Q["Exercise EX056"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["12.1 The portfolio"]
  N2["12.3 Continuing development"]
  N3["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> Q["EX056"]

[Learning outcomes]
    |
    v
[12.1 The portfolio]
    |
    v
[12.3 Continuing development]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX056]

Learning outcomes

You will (1) assemble a practice portfolio; (2) present outcomes and limits; (3) plan continuing professional development.

12.1 The portfolio

Grace assembles her portfolio: the mandate, stakeholder map, survey and conversation findings, procedures and scripts, workflow and runbook, near-miss analysis, quality log, laboratory report and quarterly reports. Each item has a short note explaining what it shows about her practice. Alan reviews it with her, checking that every item is free of personal details and that claims are supported by evidence. A portfolio shows not only what she did but how she reasoned, which matters for professional assessment. It is stored securely.

12.2 Outcomes and limits

Grace presents outcomes after six months: the share of suspicious messages reported rose; median time to verdict fell from about a day to a few hours; one fake invoice was stopped by callback; and staff burden stayed level. She presents limits: six months is short, numbers are small and some improvement may reflect novelty. Managers ask what she would do next; she suggests extending callback rules to tenant refund requests and reviewing the phone procedure with the tenants' panel. Managers agree.

12.3 Continuing development

Grace plans her continuing development: join a regional network of security coordinators in housing, read the annual Verizon DBIR and NIST SP 800-50r1 guidance, and complete a short course in data protection. Alan suggests she mentor a colleague as her backup, which also strengthens Ferngate's resilience. Grace reflects that her background in supporting people proved more useful than she expected, because human-centred security depends on trust, clear communication and practical help as much as on technical knowledge. Alan signs off her course.

Worked example

Grace assembles a portfolio, presents six-month outcomes with limits and plans continuing development and mentoring.

Synthetic case. Outcomes are synthetic; the DBIR and SP 800-50r1 are real.

Errors and limits

Portfolios can be selective. Six months is short.

Exercises

• EX056 — Portfolio check. What did Alan check in the portfolio?
  Show marking criteria

  Rubric: 3 = no personal details and supported claims;; 2 = quality;; 1 = vague;; 0 = none.
• EX057 — Verdict time outcome. How did median time to verdict change?
  Show marking criteria

  Rubric: 3 = from about a day to a few hours;; 2 = faster;; 1 = vague;; 0 = none.
• EX058 — Next control. What next control did Grace suggest?
  Show marking criteria

  Rubric: 3 = callbacks for tenant refund requests;; 2 = refunds;; 1 = vague;; 0 = none.
• EX059 — Mentoring. Whom will Grace mentor?
  Show marking criteria

  Rubric: 3 = a colleague acting as her backup;; 2 = backup;; 1 = vague;; 0 = none.
• EX060 — Background lesson. Why did Grace's background prove useful?
  Show marking criteria

  Rubric: 3 = human-centred security depends on trust and communication;; 2 = people skills;; 1 = vague;; 0 = none.

Synthesis

A portfolio shows reasoning and outcomes, and continuing development sustains practice.

Continue studying — chapter 12 of 12

← Chapter 11 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →