Chapter 30 — Project review and next steps
Lesson map
Lesson 30 published. Map, example, EX088.
flowchart TD
N0["Learning outcomes"]
N1["30.1 Presentation"]
N2["30.2 Questions"]
N3["30.3 Outcome"]
N4["30.4 Next steps"]
N0 --> N1 --> N2 --> N3 --> N4
N4 --> EX["Worked example"]
EX --> Q["Exercise EX088"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["30.1 Presentation"]
N2["30.2 Questions"]
N3["30.3 Outcome"]
N4["30.4 Next steps"]
N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX088"]
[Learning outcomes]
|
v
[30.1 Presentation]
|
v
[30.2 Questions]
|
v
[30.3 Outcome]
|
v
[30.4 Next steps]
|
v
[Worked example] --> [Exercise EX088]
Learning outcomes
You will (1) present a project to a client and tutor; (2) answer questions about evidence; (3) plan continued development.
30.1 Presentation
Jamal presents his project to the IT manager, the chief executive and Ms. Grant. He explains the problem in plain language: ways into Riverbend's systems from the internet that were not all known or protected. He shows the six paths, the changes and the evidence. The chief executive asks how Riverbend will know if a new path appears. Jamal explains the scheduled scans and the firewall review every six months. He brings printed copies of the path table and the scan results for each person present.
30.2 Questions
Ms. Grant asks why he did not remove remote desktop entirely. Jamal explains that some staff work from home and need it, so the gateway with multi-factor authentication balances need and risk. The IT manager asks about cost; Jamal shows that every change used existing tools. Both answers rely on evidence from his records. He learns that clear records make questions easy to answer. Ms. Grant also asks what he would do differently, and he answers that he would have run the external scan first, because it found a path the internal records missed.
30.3 Outcome
The project is accepted, and Riverbend adopts the six-monthly remote access review as a standing task. Jamal receives a strong mark. He reflects that the three years taught him to configure, check and document controls, and that the most valuable habit was confirming that each change worked. Ms. Grant notes that his notebook shows steady growth from following instructions to making careful judgements. The chief executive thanks him for making a technical subject understandable, and the IT manager asks him to present the project to centre managers at their next meeting.
30.4 Next steps
Jamal accepts a junior technician role at Riverbend after graduating. He plans to study for a professional certification and to deepen his knowledge of cloud services. Ms. Grant reminds him that standards change; ISO/IEC 27000 was revised in 2026, and he should check editions when citing them. The next course in this area, data governance, looks at how decisions about data quality and use are made, which complements the controls he has learned to run. He also plans to mentor next year's placement student.
Worked example
Jamal presents his remote access project, answers questions on remote desktop and cost with evidence, has the review adopted as a standing task and plans further study.
Synthetic case. The review is synthetic.
Errors and limits
Answers without records to support them weaken a project review.
Exercises
- EX088 — New path detection. How will new paths be detected? Rubric: 3 = scheduled scans and six-monthly firewall review;; 2 = partly correct;; 1 = vague;; 0 = none.
- EX089 — Remote desktop kept. Why keep remote desktop? Rubric: 3 = staff work from home;; 2 = partly correct;; 1 = vague;; 0 = none.
- EX090 — Standing task. What becomes a standing task? Rubric: 3 = the six-monthly remote access review;; 2 = partly correct;; 1 = other;; 0 = none.
Continue studying — lesson 30 (chapter 30 of 30)
← Chapter 29 · Course chapter index · Next course via chapter index →
The chapter index leads to the next course in the study path.