Cybersecurity Risk Assessment & Mitigation Strategy

Many organizations face difficulty in identifying and prioritizing their cybersecurity risks. Learners will conduct a risk assessment, document vulnerabilities, and deliver actionable remediation recommendations in a professional format. Evaluate the cybersecurity posture of a small-to-medium business (SMB) or simulated environment. Identify vulnerabilities, assess risks, and develop a prioritized mitigation plan aligned to industry standards (e.g., NIST, ISO).

Security Policy Review & Compliance Alignment

Organizations often lack formal documentation or clarity in their security policies. Learners will analyze current practices, benchmark them against standards, and provide updated documentation tailored to the organization’s needs. Review an organization’s existing security policies (or create new ones) and assess them against industry-standard compliance frameworks. Recommend revisions or additions to ensure regulatory readiness.

Network Security Audit & Recommendations

As networks grow, misconfigurations and unsecured devices pose increased risk. Learners will analyze network architecture, identify exposures, and offer detailed recommendations to harden systems. Conduct a basic audit of a network (real or simulated) to identify weaknesses in configuration, topology, and access controls. Propose changes to improve security and minimize attack surfaces.