Final review: turn knowledge into decisions

Learning edition: 5 October 2026. Introductory learning material.

Answer these eight prompts in your own words, then compare your answers with the guide. Use a fictional business if you do not have an authorized work example.

1. Which business process matters most if systems stop working, and who owns it?
2. A known supplier requests new bank details. What do you do before paying?
3. Why is a password plus a security question insufficient as two-factor authentication?
4. A backup dashboard is green. What further evidence shows that you can recover?
5. A work phone is lost. Who should receive the report and decide the response?
6. How will you prove that your highest-priority improvement is complete?
7. A familiar voice asks for an urgent payment outside the usual process. What matters more than how convincing it sounds?
8. An AI assistant reads a document containing an instruction to send internal records elsewhere. What boundaries should prevent that action?

Answer guide

1. Name the process, owner, supporting systems and realistic impact of interruption.
2. Pause the payment and verify through independently known contact information; report concerns using the approved process.
3. Both rely on knowledge. Use different factor types and prefer a supported phishing-resistant method.
4. A documented restoration test demonstrating usable data, dependencies and a recovery time that meets the business need.
5. The designated incident or support contact, using an accessible trusted route. The authorized owner coordinates containment and recovery within agreed privacy boundaries.
6. Define observable acceptance evidence, an owner and a date; “installed” or “training delivered” alone may not prove the intended result.
7. Independent verification and the established approval process. Pause and contact the person through a trusted route.
8. The approved task and system-enforced access limits. Source content does not authorize disclosure; restrict files and tools, inspect proposed actions and stop and report unexpected behavior.

Self-check: If an answer is incomplete, revisit its lesson and try again. Aim to explain all eight before completing your action plan. This self-check is not an independently assessed examination.

Keep sensitive working notes inside your organization. Course completion does not certify a person's competence or an organization's security.