◇ OpenCyber Academy
Technologist · Chapter 30 · English

Chapter 30 — Capstone assessment

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 30 — Capstone assessment

Lesson map

Lesson 30 published. Map, example, EX088.

flowchart TD
  N0["Learning outcomes"]
  N1["30.1 Assessment criteria"]
  N2["30.2 Practitioner feedback"]
  N3["30.3 Next steps"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX088"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["30.1 Assessment criteria"]
  N2["30.2 Practitioner feedback"]
  N3["30.3 Next steps"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX088"]
[Learning outcomes]
    |
    v
[30.1 Assessment criteria]
    |
    v
[30.2 Practitioner feedback]
    |
    v
[30.3 Next steps]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX088]

Learning outcomes

You will (1) assess the capstone against criteria; (2) receive and act on practitioner feedback; (3) plan next steps as a technologist.

30.1 Assessment criteria

Ruth and Sam assess the capstone on four criteria agreed at the start: completeness, tested function, clarity for future users and alignment with Brightwater's risks. Each is scored from zero to three. Tomás scores three for tested function and alignment, two for completeness because vendor access setup was added late, and three for clarity. He explains each score with evidence, such as test logs and Sam's review comments. Clear criteria let assessment focus on evidence rather than impressions. Ruth and Sam score independently before agreeing final marks.

30.2 Practitioner feedback

A visiting practitioner reviews the package and suggests adding a section on what to do if the depot opens before all controls are ready, which often happens in real projects. Tomás adds a short interim-risk section: which controls are essential before opening, such as individual sign-in and firewall rules, and which can follow within a month. He thanks the practitioner and records the change. Feedback from experienced people often points to real-world pressures that classroom work does not anticipate. The section fits on a single page.

30.3 Next steps

Tomás reflects on what he can now do: inventory systems, trace data flows, write scenarios, apply STRIDE and attack trees, write small scripts, set up monitoring, deploy and validate changes, and hand over operations. Brightwater offers him a junior infrastructure and security role. He accepts and plans to study identity and cloud security next. His final reflection is that a technologist's value lies in making designs work reliably in the real world, and in telling designers honestly when they do not.

Worked example

Tomás's capstone is scored on four criteria, he adds an interim-risk section from practitioner feedback and plans his next steps.

Synthetic case. Scores and people are synthetic.

Errors and limits

Assessors familiar with the student may score generously. Interim plans can become permanent.

Exercises

Synthesis

Capstone assessment against agreed criteria, plus practitioner feedback, completes the technologist's preparation for practice.

Continue studying — chapter 30 of 30

← Chapter 29 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →