◇ OpenCyber Academy
Technical · Chapter 18 · English

Chapter 18 — Supervised technical project

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 18 — Supervised technical project

Lesson map

Lesson 18 published. Map, example, EX069.

flowchart TD
  N0["Learning outcomes"]
  N1["18.1 Choosing the project"]
  N2["18.2 Delivery"]
  N3["18.3 Measuring the result"]
  N4["18.4 Handover and reflection"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX069"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["18.1 Choosing the project"]
  N2["18.2 Delivery"]
  N3["18.3 Measuring the result"]
  N4["18.4 Handover and reflection"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX069"]
[Learning outcomes]
    |
    v
[18.1 Choosing the project]
    |
    v
[18.2 Delivery]
    |
    v
[18.3 Measuring the result]
    |
    v
[18.4 Handover and reflection]
    |
    v
[Worked example] --> [Exercise EX069]

Learning outcomes

You will (1) plan and deliver a supervised privacy project; (2) measure the result; (3) hand over to operations.

18.1 Choosing the project

For her final project, Leila chooses to roll out network separation to the seven clinics not yet covered, because her verification report showed it as the largest unverified control and the guest Wi-Fi exposure affected patient images. She writes a project plan with scope, schedule, tests, rollback steps and owners. The operations director approves the plan, and the IT contractor agrees to carry out configuration changes outside clinic hours while Leila prepares tests and documentation for each clinic. Each clinic gets a test sheet.

18.2 Delivery

The project proceeds one clinic per week. At each clinic, the contractor records the current configuration, applies the three-zone design and Leila tests from the guest network, the office zone and the clinical zone. At the fourth clinic, the intraoral cameras stop sending images because they used an address outside the clinical zone. The rollback plan restores service within twenty minutes, the camera addresses are corrected, and the change is reapplied the next week with an added test for camera image transfer.

18.3 Measuring the result

After eight weeks, all eight clinics have three zones, and guest Wi-Fi cannot reach any imaging server in Leila's tests. The verification report now marks network separation as verified in all clinics. She also measures side effects: no increase in support calls after the first week, and image transfer times unchanged. She presents results with the evidence log and notes the remaining risk that DICOM traffic inside the clinical zone is still unencrypted, which needs a future vendor project. Evidence accompanies each claim.

18.4 Handover and reflection

Leila hands the control document, test scripts and evidence to the IT contractor and data protection officer, who agree a yearly re-test. In her reflection, she notes that technical privacy work is mostly careful configuration, testing and documentation rather than dramatic discoveries. Mr. Okafor closes the course by pointing out that each technical change she made, from reminder content to network zones, reduced the chance that a patient's health information would reach someone who should not see it. Leila joins Marlow as a technician.

Worked example

Leila rolls out network separation to seven more clinics, recovers from a camera failure with rollback, verifies all eight clinics and hands over documents and tests.

Synthetic case. The project is synthetic.

Errors and limits

Projects that end without handover lose their controls; agree owners before closing.

Exercises

Continue studying — lesson 18 (chapter 18 of 18)

← Chapter 17 · Course chapter index · Next course via chapter index →

The chapter index leads to the next course in the study path.