Chapter 30 — Capstone assessment
Lesson map
Lesson 30 published. Map, example, EX088.
flowchart TD
N0["Learning outcomes"]
N1["30.1 Presentation"]
N2["30.2 Defending choices"]
N3["30.3 Continuing development"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4
N4 --> EX["Worked example"]
EX --> Q["Exercise EX088"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["30.1 Presentation"]
N2["30.2 Defending choices"]
N3["30.3 Continuing development"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX088"]
[Learning outcomes]
|
v
[30.1 Presentation]
|
v
[30.2 Defending choices]
|
v
[30.3 Continuing development]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX088]
Learning outcomes
You will (1) present a capstone to assessors; (2) defend design choices with evidence; (3) plan continued professional development.
30.1 Presentation
Rosa presents her toolkit to a panel of her tutor, Owen and an external assessor. She demonstrates the planner on synthetic data, shows the monitoring alert firing at hour 4 and walks through a runbook. She keeps the demonstration short and focused on the problems the toolkit solves: outages from expiry, silent failures and lost knowledge. The panel asks her to show evidence that the toolkit would have prevented a real past incident. To answer, she replays last year's expiry outage data through the planner, which would have flagged the certificate twenty-nine days before it expired.
30.2 Defending choices
The external assessor asks why she did not write her own certificate checking code. Rosa answers that standard libraries and clients implement verification carefully and receive security fixes, while custom code would likely miss edge cases from RFC 5280. Asked why the monitoring rule waits three hours, she explains the trade-off between noise and speed and points to the separate expiry checks. She admits that the toolkit was tested only on synthetic data, and proposes a pilot at another council. She thanks the assessor for the question about testing and adds the pilot to her plan.
30.3 Continuing development
The panel passes the capstone with a recommendation to publish the toolkit openly after review. Rosa writes a development plan: gain a recognised certificate in security operations, learn more about hardware security modules and signing services, follow post-quantum migration guidance in FIPS 203 and 204, and keep contributing to council operations. She reflects that the course taught her to keep cryptographic systems healthy using vetted tools, evidence and clear communication. She schedules quarterly reviews of the plan with Owen, who agrees to mentor her for her first year in a permanent role. The plan lists resources and dates, not just intentions.
Worked example
Rosa presents her toolkit, defends using vetted libraries and the three-hour rule, admits synthetic-only testing and plans further study.
Synthetic case. The assessment is invented; standards cited are real.
Errors and limits
Demos can hide weaknesses; assessors should ask for evidence. Development plans need concrete steps.
Exercises
- EX088 — Panel request. What evidence did the panel request? Rubric: 3 = that the toolkit would have prevented a real past incident;; 2 = incident;; 1 = vague;; 0 = none.
- EX089 — Own code. Why did Rosa avoid writing her own certificate checking? Rubric: 3 = vetted libraries handle RFC 5280 edge cases and get security fixes;; 2 = reason;; 1 = vague;; 0 = none.
- EX090 — Development plan. Name two items in Rosa's development plan. Rubric: 3 = two of security operations certificate, HSM and signing study, post-quantum guidance, continued council work;; 2 = one;; 1 = vague;; 0 = none.
Synthesis
Capstone assessment tests whether a learner can explain, defend and limit their work with evidence.
Continue studying — chapter 30 of 30
← Chapter 29 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →