Chapter 12 — Practice portfolio and final review
Lesson map
Lesson 12 published. Map, example, EX056.
flowchart TD
N0["Learning outcomes"]
N1["12.1 The portfolio"]
N2["12.2 Demonstrating competence"]
N3["12.3 Outcomes for Oakline"]
N4["12.4 Continuing development"]
N5["12.5 Closing reflection"]
N6["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6
N6 --> EX["Worked example"]
EX --> Q["Exercise EX056"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["12.1 The portfolio"]
N2["12.2 Demonstrating competence"]
N3["12.3 Outcomes for Oakline"]
N4["12.4 Continuing development"]
N5["12.5 Closing reflection"]
N6["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6 --> Q["EX056"]
[Learning outcomes]
|
v
[12.1 The portfolio]
|
v
[12.2 Demonstrating competence]
|
v
[12.3 Outcomes for Oakline]
|
v
[12.4 Continuing development]
|
v
[12.5 Closing reflection]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX056]
Learning outcomes
You will (1) assemble a practice portfolio; (2) demonstrate competence; (3) plan continuing development.
12.1 The portfolio
Grace's portfolio collects evidence of her work: the context summary, the network review, the change review checklist, the investigation report, the troubleshooting cases, the baseline lab and her practice log. Each item has a short cover note stating what it shows and which course outcome it supports. All client-identifying details are removed, and Oakline approves the portfolio for assessment. A portfolio shows what a practitioner can actually do, which matters more to employers than course completion alone. Sam reviews each item before submission.
12.2 Demonstrating competence
In the final review, an assessor asks Grace to walk through one piece of work in depth. She chooses the investigation: how she followed authorisation and escalation, built the timeline, separated facts from inferences and turned root causes into control changes. The assessor asks what she would do differently. She says she would have checked mailbox forwarding rules across the firm sooner, since one compromised account suggests others may have been targeted. Reflection on improvements shows mature judgement. The assessor notes this answer.
12.3 Outcomes for Oakline
The firm's position has improved during the course: guest wireless no longer reaches printers, remote access and email require multi-factor authentication, external forwarding needs approval, rule changes are reviewed against criteria, and the IT team has daily and weekly routines. Grace lists these outcomes with evidence, careful not to claim credit for work the IT team did. Accurate attribution maintains good relationships and credibility. Each outcome is linked to a ticket, change record or report showing when it was completed and by whom. Priyanka confirms the list is accurate before it goes into the portfolio.
12.4 Continuing development
Grace writes a development plan for the next year: deepen knowledge of cloud email security, practise packet-level troubleshooting in labs, read the full text of SP 800-94 and SP 800-207, and join a local practitioners' group. Sam agrees to continue mentoring monthly. Network security changes constantly, so a plan for continued learning is part of professional competence, not an optional extra. Each item has a target date and a way to show it was done, such as a lab write-up or a short summary of what she read. Sam reviews progress at their monthly meetings and suggests adjustments as her new role develops.
12.5 Closing reflection
Grace reflects that her support background was an advantage: she understood users and service, so her security work was practical and accepted. The main new skills were evidence handling, structured review and communicating risk to partners. She completes the course and takes a junior network security role at a managed service provider, where she will apply the same approach across several client organisations. She notes that the habits of scope, evidence, smallest change, verification and recording will matter even more when she works across many clients, each with different systems and expectations.
Worked example
The portfolio contains seven items with cover notes; the assessor passes Grace with commendation for her investigation.
Synthetic case. The portfolio and review are synthetic.
Errors and limits
Portfolios that claim credit for others' work undermine trust.
Exercises
- EX056 — Portfolio cover note. What does each cover note state? Rubric: 3 = what it shows and which outcome;; 2 = purpose;; 1 = title;; 0 = none.
- EX057 — Improvement named. What would Grace do differently in the investigation? Rubric: 3 = check forwarding rules firm-wide sooner;; 2 = check others;; 1 = vague;; 0 = none.
- EX058 — Outcome list. Name three improvements at Oakline. Rubric: 3 = guest isolation, MFA, forwarding approval, change review, routines;; 2 = two;; 1 = one;; 0 = none.
- EX059 — Attribution. Why avoid claiming credit for the IT team's work? Rubric: 3 = accuracy, relationships, credibility;; 2 = honesty;; 1 = modesty;; 0 = none.
- EX060 — Development item. Name one item in Grace's development plan. Rubric: 3 = cloud email security, labs, reading, practitioners' group;; 2 = one;; 1 = vague;; 0 = none.
Synthesis
A practice portfolio, honest reflection and a development plan complete the professional course.
Continue studying — chapter 12 of 12
← Chapter 11 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →