What the strategy page can say

Lesson map

Lesson 20. Map, example, EX074.

flowchart TD
  N["A leaving note"] --> F["Repeat the prints and the open lines"]
  F --> Q{"Does the sentence add a new total, an owner, a cleaned mail, or a finished limit?"}
  Q -->|Yes| R["Reject it"]
  Q -->|No| K["The note may cite that line"]

Twenty lessons meet a planning minimum. The edition remains a working draft.

Logical drawing

may stay
    total 245 min; MISSED by 5 min; longest step 70 min
    shared by all three: identity provider
    relay and roster: NONE
    second exercise booked, not run
    case management and the roster still excluded
must not be added
    a print of MET
    an owner typed into a NONE cell
    appointment reasons already removed
    four hours confirmed because the chapter count reached 20

Learning outcomes

After this chapter, you should be able to:

1. Repeat only the laboratory lines and the decisions the file already holds.
2. Reject a leaving note that closes open lines.
3. Hand the next course onward without calling this edition finished.

20.1 A note may quote the file. It may not improve it.

A leaving note may say what was already written down. The dependency listing still prints the identity provider as the component shared by all three services, and it still prints NONE for the email relay and the roster spreadsheet. The restore log still totals 245 minutes, still prints MISSED by 5, and still selects the database restore at 70 minutes. The director approved improvements within thirty days and a second exercise. That exercise is booked, not run, so four hours is not confirmed. Appointment reasons are still a quarter outcome, not a cleaned mail. Case management and the volunteer roster are still outside the first scope. The integration inventory is still unconfirmed. Fallback sign-in is still untested. The roster sharing list is still absent. No measured saving has been taken off the 55-minute search.

20.2 Worked example

Lesson table; scroll horizontally to read all columns →

Synthetic case. The note is a classroom page about Northstar. It is not a certificate and not a client communication.

Errors and limits

Meeting the planning minimum of 20 lessons leaves this edition a working draft. A later decision can add a lesson, because there is no maximum. These English chapters do not publish another language edition. Human factors and cyber policy is the learner's following subject. Open lines at Northstar stay open when the learner turns that page. These chapters do not certify the organisation, and they do not hand anyone a qualification.

Apply

• EX074 — Four claims. A classmate's leaving note says the restore print is now MET, that the email relay has an owner because the decision list asked for one, that appointment reasons have already been removed, and that twenty lessons confirm the four-hour limit. Which claims do you reject, and what do twenty lessons meet?
  Show marking criteria

  Rubric: 3 = reject all four; the print stays 245 minutes and MISSED by 5, with the database restore longest at 70; NONE remains on the relay and the roster; removal of the appointment reason is still an outcome; twenty lessons meet the planning minimum and leave this edition a working draft;; 2 = reject the four claims and keep the published print;; 1 = one claim;; 0 = none.

Sources for chapters 2–4

• National Institute of Standards and Technology. (2024). The NIST Cybersecurity Framework (CSF) 2.0 (NIST CSWP 29). https://doi.org/10.6028/NIST.CSWP.29 — supply chain risk management within Govern (Chapter 3).
• National Institute of Standards and Technology. (2020). NIST Privacy Framework: A tool for improving privacy through enterprise risk management, Version 1.0 (NIST CSWP 10). https://doi.org/10.6028/NIST.CSWP.10 — privacy risk from review work and data flows (Chapters 2–3).

All Northstar details in Chapters 2–4 remain fictional; labs use only the Python standard library on synthetic data, and their outputs are embedded from real runs.