{ "review_date": "2026-10-28", "scope": { "questions": 855, "glossary_terms": 269, "lessons": 30, "concepts": 133 }, "method": "Full rereading of scenarios, every choice, keys, explanations and named primary passages; source concepts distinguished from fictional inference and editorial pedagogy. This is an editorial review, not issuer approval or validated exam-readiness evidence.", "outcome": { "answer_keys_changed": 0, "question_explanations_changed": 0, "scoring_history_compatible": true, "source_and_glossary_repairs_applied": true }, "repairs": [ "Matrix definition links now point to NISTIR 7316-derived NIST evidence.", "Federated-session URL and cryptographic section locator corrected.", "OSI, classless prefixes, IoT devices, cloud duties, AI concepts and SoA teaching have direct primary links.", "Correction/corrective action, hash output, software, non-human identities and post-quantum scope clarified.", "ISO 9001/service-management role sources and 2022 structure previews added at their exact scope.", "Historical deployment advice, obsolete clause transfers and unavailable licensed teaching remain excluded.", "Free overviews/previews are visually separated from paid full materials; the selected PECB course is clearly required and paid. The ISO/IEC 27000:2026 overview is separately marked with the publisher's CHF 0 listing checked on 28 October 2026; format and order terms must be confirmed with ISO.", "Narrow-phone navigation spacing repaired; horizontal rank comparisons are keyboard-focusable with scroll instructions, and reduced-motion preferences are respected." ], "remaining_needs": [ { "id": "CC04", "title": "Network zones, ports and application-aware controls", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "Complete paper diagram and permitted-flow table with defined initiating endpoints, direction, ports, application checks and a separate management route.", "Step-by-step browser request, reply and application-authorization walkthrough, plus explained allowed/blocked examples.", "Explicit encrypted-traffic inspection boundary and a case in which a permitted TCP connection carries an unauthorized business request." ], "still_missing": [ "A live packet lab, actual firewall configuration and independent operational validation remain outside this introductory paper case.", "Supporting DNS, time, update and logging flows, full availability design, subnetting and real product capabilities need a fuller design; the case expressly does not hide them behind an allow-all rule.", "This is formative source-grounded learning, not an independently marked current CC assessment or pass prediction." ], "access": "FREE for the selected readings and complete editorial paper exercise. No paid course or simulator is needed for this bounded gap. Extra current CC teaching, live labs or independent marking are optional purchases; exam/credential charges are separate.", "guide": "workshop-cc04.html#remaining", "exam_scope": "exam-coverage.html#guide-CC04" }, { "id": "CC05", "title": "Physical/social security tests and interpreting findings", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "Worked paper-only physical/social exercise joining named authority, property/person/process scope, prohibited acts, stop/resume conditions and evidence handling.", "Two observed outcomes, a justified process finding with a bounded business implication, and a follow-up/retest record.", "Explained distinction between a door-control failure in the simulation and an unsupported claim that real confidential data were stolen." ], "still_missing": [ "No covert or live physical/social test is assigned. Real tests need context-specific competent design, property/person/system authority and applicable legal/privacy review.", "One simulated observation does not estimate a population-wide failure rate or independently demonstrate staff competence or operational security.", "The model is editorial feedback, not an issuer-marked exam exercise." ], "access": "FREE primary planning/evaluation readings and a complete paper case with explained model. No paid tester or course is needed for this introductory learning task; any future professional testing is a separate decision requiring its own scope and authority.", "guide": "workshop-cc05.html#remaining", "exam_scope": "exam-coverage.html#guide-CC05" }, { "id": "CC06", "title": "Incident plan, data handling and exercise feedback", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "One integrated fictional plan with classification/handling rules, incident criteria, authority, containment and recovery conditions supplied before the injects.", "Reviewed UTC event timeline distinguishing event time from collection time, evidence-access record, decision/escalation log and after-action improvement table.", "Explained handling of an uncertain disclosure, a missing backup contact, a request to delete sensitive evidence and verification before recovery." ], "still_missing": [ "The mini-plan teaches connections; it is not a complete organization-specific incident policy, legal notification determination, evidence-acquisition procedure or forensic laboratory.", "No live restoration, provider response, real permission change or operational retest has been performed.", "Publisher discussion guidance and an editorial model do not independently assess learner or organizational incident-response capability." ], "access": "FREE selected primary readings and the complete integrated tabletop with explained records. A paid exercise facilitator or commercial CC course is not required for this bounded introductory case. Specialist operational training, independent feedback and exam fees are separate decisions.", "guide": "workshop-cc06.html#remaining", "exam_scope": "exam-coverage.html#guide-CC06" }, { "id": "CC08", "title": "Threat intelligence: report → behaviour → defensive action", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "Complete beginner workflow with a fictional source/context record, observed actions, justified current ATT&CK mappings, unsupported alternatives and explicit uncertainty.", "Prioritised defensive decision table that accounts for existing mail/process evidence, legitimate administration and encrypted-traffic visibility limits.", "Safe paper validation with suspicious, benign and missing-evidence cases, plus optional original MITRE practice whose real publisher answer and version limits were checked." ], "still_missing": [ "The fictional report is not independently corroborated real threat intelligence; current real intelligence needs source reliability, environment relevance and additional evidence assessed in its own context.", "No live adversary emulation, production alert tuning or validation of a specific product was performed.", "The historical MITRE exercises use earlier ATT&CK versions and do not supply current CC mixed practice, full answer rationales or independent readiness assessment." ], "access": "FREE primary mapping lessons, technique pages, optional publisher ticket/key and the explained editorial case. No paid intelligence feed, software, commercial bank or course is required for this bounded objective. Independent assessment and advanced operational training remain separate optional choices.", "guide": "workshop-cc08.html#remaining", "exam_scope": "exam-coverage.html#guide-CC08" }, { "id": "AI01", "title": "AI governance, risk appetite and control choice", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "A complete introductory adoption decision connects the use, asset, owners, affected people, risk appetite, data/model protection, privacy/ethical harms, control trade-offs and residual-risk decision.", "Original worked decision record, model guidance and self-check are available without an account or paid tool.", "CISA supplies an additional publisher discussion and desired discussion outcome; it does not individually assess the learner." ], "still_missing": [ "Independent review/marking of the learner's own fresh decision record is not provided by these public readings or the editorial model answer.", "A real adoption still needs organization-specific facts, applicable requirements, supplier evidence, affected-party input and authorized approval. Complete AI RMF/ISO 42001/legal instruction remains outside the introductory target." ], "access": "No payment is needed for these selected readings or the paper case. Paid current teaching/marked support is optional, with exact coverage and actual feedback to be verified before purchase; no paid AI credential is required by this selection.", "guide": "workshop-ai01.html#remaining", "exam_scope": "exam-coverage.html#guide-AI01" }, { "id": "AI02", "title": "AI continuity, model drift, awareness and measures", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "A dependency/recovery-owner table covers application, prompt/configuration, reference data, index, hosted model, identity/network and business records, with distinct recovery goals.", "A worked KRI calculation has a baseline, denominator, direction, fictional threshold, owner and response, while distinguishing observed degradation from an attack finding.", "A synthetic voice-impersonation inject practices trusted-channel verification, payment/change authority and escalation.", "A paper fallback/restore walkthrough and CISA continuity discussion provide guided practice without an account or cloud charges." ], "still_missing": [ "The learner's own fresh dependency table, recovery explanation and KRI decision still need independent review if marked practice is desired.", "No actual backup restore, provider failover, model-version availability, statistical drift diagnosis or operational recovery time has been tested by this paper case.", "A qualified organization must define real business-impact priorities, recovery targets, reporting duties and supplier arrangements." ], "access": "Selected reading and the complete paper case are free. A hosted model/API/Sentinel or other cloud lab can incur service/compute charges and is not needed. Paid marked support remains optional and unverified; do not buy a course merely because its catalogue says AI or continuity.", "guide": "workshop-ai02.html#remaining", "exam_scope": "exam-coverage.html#guide-AI02" }, { "id": "AI04", "title": "AI-assisted network detection and cloud responsibility", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "Explicit firewall/IDS/IPS comparison and an AI-alert false-positive walkthrough with corroboration and a bounded tuning decision.", "Wireless embedded-sensor example at concept level, with device-owner and visibility limits stated.", "A stated PaaS AI scenario has a concrete provider/customer ownership table, plus qualified IaaS/PaaS/SaaS contrasts.", "Worked guidance and self-check require no Packet Tracer, Sentinel, cloud subscription or live network." ], "still_missing": [ "Independent marking of a learner's own fresh comparison/owner table remains unavailable in this selection.", "No actual IDS/IPS/firewall configuration, wireless coverage, device support, cloud contract or alert accuracy has been validated. A real design needs service-specific current documentation and engineering review." ], "access": "Assigned reading and the complete paper case are free. Azure/Sentinel/API/compute charges are separate; no service launch, account, trial or paid lab is needed. Paid guided labs/feedback are optional only after their exact requirements and coverage are checked.", "guide": "workshop-ai04.html#remaining", "exam_scope": "exam-coverage.html#guide-AI04" }, { "id": "AI05", "title": "AI workspace inputs, version changes and testing", "status": "covered_intro", "status_label": "INTRODUCTORY MATERIAL SUPPLIED", "free_coverage_added": [ "A worked permitted/conditional/prohibited-input policy connects data classification, protective handling, provider review and escalation.", "A version/change record joins application, model, prompt, data and index, with test groups, explicit fictional release gates, failure escalation and rollback evidence.", "The paper case includes calculations, a blocked-release decision, a simulated restoration timeline and self-check guidance; no cloud account or charges are required.", "CISA adds a publisher supply-chain/update discussion with facilitator outcomes, distinct from a scored learner assessment." ], "still_missing": [ "Independent feedback on a learner's own fresh policy, test and release/rollback record is not provided by this editorial example or the selected public guidance.", "No real system tests, tenant data-use terms, privacy review, provider rollback/version retention, release or restoration have been performed.", "A complete secure-development, legal/privacy or model-evaluation curriculum exceeds the bounded introductory target." ], "access": "The selected text and paper case are free. The separate Microsoft Foundry guardrails lab explicitly requires an Azure subscription and deploys a model; it is outside the free route and may incur service/compute charges. No purchase/sign-up is needed here. Paid marked practice remains optional with feedback/coverage to verify.", "guide": "workshop-ai05.html#remaining", "exam_scope": "exam-coverage.html#guide-AI05" }, { "id": "ISO01", "title": "The exact three PECB policy categories", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "A practical policy lifecycle with an owner, approval, controlled publication, understandable communication, implementation, exception handling and review.", "A fictional lifecycle record with editorial model guidance. This develops application without inventing the three-category taxonomy." ], "still_missing": [ "Current official definitions, boundaries and contrasting examples for high-level general, high-level specific and topic-specific policies.", "A current issuer classification key and provider clarification of policy-lifecycle terminology." ], "access": "Free lifecycle supplement. The selected PECB course remains paid; use its included definitions/examples/feedback before considering any extra purchase.", "guide": "workshop-iso01.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO01" }, { "id": "ISO02", "title": "Context, scope, interested parties and leadership", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "A linked fictional context/party table, scope statement and leadership decisions.", "A bounded amendment exercise that considers relevance to information security rather than assuming a generic climate programme.", "Evidence-based self-checks for scope interfaces and management responsibility." ], "still_missing": [ "Complete exact clauses 4–5 and any applicable defined terms, checked against legitimate current standard access.", "Provider clarification of Amendment 1:2024 in the selected course and exam.", "Review of additional new cases with authorized course feedback." ], "access": "These readings and the editorial exercise are free. Selected official PECB course remains paid. Standards access is conditional on legitimate included, employer or library provision; avoid duplicate purchases.", "guide": "workshop-iso02.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO02" }, { "id": "ISO03", "title": "Risk method, treatment and Statement of Applicability", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "A stated illustrative method, acceptance/escalation rules, risk entry, owner, treatment plan and small SoA extract.", "A distinction between planned target residual risk and evidenced risk after implementation.", "Explicit inclusion/exclusion reasoning and a later change that requires reassessment." ], "still_missing": [ "Complete exact 6.1 requirements, a complete SoA and justified review of the full Annex A reference set.", "Authorized provider feedback on additional methods, treatment decisions and applicability cases.", "Detailed control purposes/implementation guidance beyond the selected examples." ], "access": "Free examples improve method and decision practice. They do not replace the paid selected PECB course or licensed requirements/control guidance; check included legitimate access first.", "guide": "workshop-iso03.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO03" }, { "id": "ISO04", "title": "Objectives, support and documented information", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "A complete fictional objective/action/measurement record with role and resources.", "A competence task, targeted communication plan and controlled-document example.", "A distinction between the desired result, an implementation action, a measurement result and evidence of ability." ], "still_missing": [ "Complete exact requirements of 6.2–6.3 and clause 7; exact required documented information must be checked against legitimate current text.", "Provider review of varied objectives, competence and document-control cases.", "Complete treatment of change planning, externally sourced information and retention/disposition for the particular scope." ], "access": "All assigned guidance and this exercise are free. The selected PECB course and its activities remain paid; required standards access may already be included or otherwise legitimately available.", "guide": "workshop-iso04.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO04" }, { "id": "ISO05", "title": "Operational planning, control and reassessment", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "A continuing case introduces an external developer and a change to the export path.", "The learner identifies criteria, pre-release tests, rollback, reassessment and the records that show what actually happened.", "A concrete applicability decision is revisited instead of remaining a permanent N/A label." ], "still_missing": [ "Complete clause 8 requirements and exact required records, checked against legitimate current text.", "Authorized feedback on additional planned/unintended change cases and risk-trigger decisions.", "Real operational capability is outside a fictional paper exercise." ], "access": "Free operational case and source readings. Official PECB course remains the selected paid route; no extra commercial tool, provider or practical lab purchase is implied.", "guide": "workshop-iso05.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO05" }, { "id": "ISO06", "title": "Monitoring, internal audit and management review", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "A reproducible 12/15 approval measure with data limits.", "A risk-prioritized audit item, impartial reviewer, criterion/evidence/failure finding and management-review decision record.", "A distinction between a useful review pack and the full normative input/output list." ], "still_missing": [ "Complete exact 9.1–9.3 requirements, including all current management-review inputs/results.", "Provider feedback on audit-programme design, findings and varied review records.", "Broader evidence for the whole ISMS; one export measure is not a system-wide effectiveness conclusion." ], "access": "Free readings and editorial evidence case. Complete selected paid PECB activities; legitimate licensed standards access may be included or otherwise available.", "guide": "workshop-iso06.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO06" }, { "id": "ISO07", "title": "Nonconformity, corrective action and improvement", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "An ISMS case continues the same export finding through containment/correction, verified causes, action and effectiveness.", "A model explains why backdating approval, blaming staff or recording training completion is insufficient.", "A wider change to release checking demonstrates improvement beyond fixing the single instance." ], "still_missing": [ "Complete authorized 10.1/10.2 requirements and provider interpretation/feedback on varied action plans.", "Additional fresh cases in which correction, cause evaluation, needed action and effective closure differ.", "Evidence of real operation is outside this paper case." ], "access": "Free concept teaching and original worked case. The selected official PECB course remains paid; no separate corrective-action software or extra course purchase is assumed.", "guide": "workshop-iso07.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO07" }, { "id": "ISO08", "title": "Annex A control purposes, functions and applicability", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "Selected examples span organizational, people, physical and technological controls.", "Each example has a risk-related purpose, evidence and a provisional function discussion.", "A before/after applicability decision illustrates how a factual change can invalidate a previous exclusion." ], "still_missing": [ "Authorized purpose, function, applicability and implementation teaching across the complete 93-control reference set at the selected Foundation depth.", "Complete SoA comparison and justifications; the short example matrix is not the full control set.", "Exact 27002 control attributes and provider classification expectations with authorized feedback." ], "access": "Selected guidance/examples are free. Full licensed control guidance and the selected paid PECB course are not replaced; first confirm legitimate standards access and control activities already included in the package.", "guide": "workshop-iso08.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO08" }, { "id": "ISO09", "title": "Official selected-route course and its activities", "status": "open", "status_label": "OFFICIAL NEED REMAINS OPEN", "free_coverage_added": [ "Free official orientation makes the paid requirement explicit.", "A package-checking exercise helps avoid duplicating exam/application or standards purchases." ], "still_missing": [ "Complete the required official PECB Foundation course and its activities through the selected authorized route.", "Obtain actual provider materials, included practice, feedback and exact standards-access arrangements.", "Complete the separate assessment and application under current issuer rules." ], "access": "OPEN / PAID SELECTED ROUTE. Current handbook requires the official course; free reading cannot satisfy this requirement. Public course information describes exam/certificate fees as included in training. Confirm the total written package, access period, language, keys/feedback and retake conditions before paying; no purchase was made. The current handbook gives a 12-month completion/application cycle from instructor-led course completion, or from purchase for self-study/eLearning. Record that trigger date. Its standalone exam $500 and certificate $200 figures must not be added automatically to a paid partner-training package that includes the course, first attempt, first retake and certificate application. Confirm the actual offer and current terms.", "guide": "workshop-iso09.html#remaining", "exam_scope": "exam-coverage.html#guide-ISO09" }, { "id": "PRACTICE_CC", "title": "Build a current-outline practice and feedback record", "status": "partial", "status_label": "PARTIAL · NEEDS REMAIN", "free_coverage_added": [ "Live-verified official short practice with immediate explanations; final-report form distinguished from free individual feedback.", "A reusable record that maps study and errors to the current objectives and the five AI applications.", "Free interface orientation and the separate current CC CAT navigation/scoring limits." ], "still_missing": [ "No free full current CC assessment with verified coverage of all 19 objectives, all printed scope bullets and all five AI applications was established in this targeted search.", "The new workshops and 855-question terminology bank remain formative editorial practice, not a calibrated or official full mock.", "A learner who needs independent marking or diagnostic feedback must arrange it; this site has not assessed the learner's work.", "Beyond the original targeted cases, this nineteen-guide set has no dedicated checked bot-identity lifecycle and behavioral-login case for the CC Domain3AIsection. Existing lessons/term practice provide foundations, not a completed full-application assessment." ], "access": "These public readings, the inspected individual knowledge-check feedback and this paper activity are free. Full official training/assessments are paid options for new applicants after the old program closed; they are not a CC exam-entry requirement. Existing access is personal and time-limited. Exam and later maintenance charges follow issuer terms; no purchase was made.", "guide": "workshop-practice-cc.html#remaining", "exam_scope": "exam-coverage.html#guide-PRACTICE_CC" }, { "id": "PRACTICE_ISO", "title": "Current PECB Foundation practice and feedback", "status": "open", "status_label": "OFFICIAL NEED REMAINS OPEN", "free_coverage_added": [ "Official sample-format orientation and a transparent coverage/error-log method.", "New linked ISMS application cases with editorial models and self-checks for ISO01–08; these are formative teaching, not an official test.", "Explicit separation of issuer questions, issuer keys, editorial explanations and readiness evidence." ], "still_missing": [ "Fresh legitimate PECB-aligned application/evaluation practice spanning both domains and all 65 competency/knowledge statements.", "Authorized verified keys and suitable feedback for a full current Foundation assessment; no free current full official keyed mock was verified.", "Provider correction of unresolved errors, plus current actual exam arrangements. An Atlas score cannot predict a pass." ], "access": "OPEN. Inspect legitimate practice included in the selected paid PECB package first. A separate bank is optional and justified only by an evidenced remaining gap; no paid provider or bank was started.", "guide": "workshop-practice-iso.html#remaining", "exam_scope": "exam-coverage.html#guide-PRACTICE_ISO" } ], "verification_limits": [ "Primary concepts do not make fictional scenarios official issuer questions.", "A correct key is not proof of complete exam coverage or readiness.", "Full current official-course teaching, licensed requirements, provider policy definitions, independently marked labs and fresh full assessments remain separate.", "Mobile QA uses actual narrow-browser rendering, not physical Android/iOS device certification.", "Publisher blocking and successful retrieval are reachability results, not availability or access guarantees." ], "applied_learning_update": { "date": "2026-10-29", "summary": { "original_gap_areas": 19, "introductory_gaps_addressed": 8, "partial": 9, "open": 2, "remaining_partial_or_open": 11, "publisher_scope_records_reviewed": 51, "free_reading_or_orientation_records": 49, "licensed_full_material_boundaries": 2, "source_records_added": 50, "source_records_updated": 1, "new_distinct_publisher_urls": 29, "basis": "Counts describe available material for the original bounded introductory needs, not independent marking, mastery, exam coverage percentages or complete certification preparation." }, "resource_report": "Gap_Materials_Report.json", "guides": "workshops.html", "quiz_items_changed": 0, "review_scope": "Targeted gap materials and their original application guides; the complete 855-item primary review remains dated 28 October 2026.", "quiz_scope_note": "The 28 October full quiz review is preserved. The 29 October update targets nineteen learning gaps and adds application guides; all 855 scored questions, keys and explanations remain unchanged.", "independent_review": { "all_19_cases_read": true, "resource_scope_records_reviewed": 51, "direct_primary_checks": "Selected assigned primary passages were independently rechecked; not every optional external passage was freshly retrieved by the reviewer. Source-specific checks and limits are retained.", "canonical_corrections_verified": 3, "blocking_findings_remaining": 0, "runtime_tests_passed": 98, "renderer_tests_passed": 4, "html_pages_statically_checked": 64, "quiz_scored_fields_and_logic_preserved": true, "quiz_855_semantically_rereviewed_in_this_update": false, "browser_qa": "Separate hosted-site inspection; static checks alone do not establish live visual usability." }, "status": "Content and static integration review accepted; targeted materials update only." }, "remaining_needs_before_applied_update": [ { "id": "CC04", "title": "Network zones, ports and application-aware controls", "teaching": "A beginner packet-flow walkthrough across zones, including port rules versus application-aware rules and why reachability alone is insufficient.", "practice": "A reviewed diagram and traffic-flow explanation showing allowed/blocked paths, relevant port/application checks, a management path and an example where reachability alone is insufficient.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "CC05", "title": "Physical/social security tests and interpreting findings", "teaching": "A worked authorized physical/social testing case joining permission, scope, prohibited actions, evidence, business meaning and follow-up.", "practice": "A checked paper case identifying the authorised test boundary, stop/escalation conditions, safe evidence handling, a justified finding and a retest action. No real target testing is needed.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "CC06", "title": "Incident plan, data handling and exercise feedback", "teaching": "An integrated incident case linking response policy, data classification, evidence access, decision records and exercise lessons.", "practice": "A reviewed incident timeline, data/evidence handling record, decision/escalation log and after-action improvement record, each tied to the stated plan.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "CC08", "title": "Threat intelligence: report → behaviour → defensive action", "teaching": "A complete beginner threat-intelligence workflow from a report to justified mappings, priorities and defensive actions.", "practice": "A checked short analysis showing source/context, observed behaviour, justified mapping, uncertainty, prioritised defensive action and a proposed validation/evidence source.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "AI01", "title": "AI governance, risk appetite and control choice", "teaching": "A worked AI adoption decision joining risk appetite, accountability, data/model protection, privacy, ethics and control trade-offs.", "practice": "A reviewed decision record identifying the AI asset/use, data, owner, plausible harms, selected controls, residual risk and an escalation/approval decision.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "AI02", "title": "AI continuity, model drift, awareness and measures", "teaching": "A recovery/dependency walkthrough for models, configurations and data; a drift/KRI decision; and responses to AI-enabled impersonation.", "practice": "A checked asset/dependency and recovery-owner table, a fallback/restore explanation and a metric example with baseline, direction, threshold, owner and response.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "AI04", "title": "AI-assisted network detection and cloud responsibility", "teaching": "A clear IDS/firewall distinction, anomaly limits, wireless/embedded implications and an AI hosting responsibility case.", "practice": "A reviewed comparison of detection versus prevention, one plausible false positive, and an owner table for a stated SaaS/PaaS/IaaS AI scenario. Include a wireless or embedded-device example at concept level.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "AI05", "title": "AI workspace inputs, version changes and testing", "teaching": "A worked acceptable-input policy and model/application change-testing case, including escalation of important events.", "practice": "A reviewed decision on permitted/prohibited input data, protective handling, version/change record, security tests, failure escalation and release/rollback evidence.", "access": "Start with linked free public readings. Additional current CC teaching or marked practice is optional; verify actual feedback and coverage before paying." }, { "id": "ISO01", "title": "The exact three PECB policy categories", "teaching": "Authoritative definitions, boundaries and contrasting examples for the three named PECB policy categories, plus a policy lifecycle. Labels alone are insufficient.", "practice": "Official current-course definitions and contrasting examples, plus checked classification of new examples and a policy approval/communication/review sequence.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO02", "title": "Context, scope, interested parties and leadership", "teaching": "Complete authorized requirements and coherent examples for context, interested parties, scope, leadership, policy and responsibilities. Confirm amendment coverage with PECB.", "practice": "An authorised clause-level explanation with a reviewed context/interested-party table, scope boundary and leadership/role evidence; obtain the provider’s amendment-scope clarification.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO03", "title": "Risk method, treatment and Statement of Applicability", "teaching": "A worked chain from criteria and assessment to treatment, necessary controls, Annex A comparison, Statement of Applicability and risk-owner decisions.", "practice": "A reviewed assessment-method description, a worked risk entry/treatment plan and linked SoA reasoning, including why selected controls are necessary and how risk owners approve relevant decisions.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO04", "title": "Objectives, support and documented information", "teaching": "Authorized requirements and applied examples for objectives/change planning, resources, competence, awareness, communication and controlled information.", "practice": "A reviewed objective/action/measure record, competence evidence and communication/document-control example, each tied to the applicable requirement.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO05", "title": "Operational planning, control and reassessment", "teaching": "A worked operation case covering criteria, controls, changes, reassessment, treatment and retained evidence.", "practice": "An authorised explanation plus a reviewed operational example showing criteria, responsibilities, a change/trigger, reassessment/treatment and the appropriate retained record.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO06", "title": "Monitoring, internal audit and management review", "teaching": "Exact current requirements and applied examples for measures, internal-audit programmes/findings and management-review inputs/outputs.", "practice": "A reviewed measure, audit finding linked to criteria/evidence, and management-review record distinguishing required inputs, decisions/actions and retained results.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO07", "title": "Nonconformity, corrective action and improvement", "teaching": "An ISMS case distinguishing correction, cause evaluation, corrective action, effectiveness and continual improvement. Corrective action is clause 10.2 in ISO 27001:2022.", "practice": "A checked nonconformity/correction/cause/action record, an effectiveness decision with evidence, and an explanation of how the ISMS is improved.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO08", "title": "Annex A control purposes, functions and applicability", "teaching": "Authorized control-level teaching across the four 2022 themes, with purposes, functions and applicability at Foundation depth. A few examples are not a complete 93-control course.", "practice": "Course/authorised control explanations and checked examples spanning organisational, people, physical and technological controls, with justified inclusion/exclusion and function distinctions.", "access": "Selected PECB course is paid. Exact standards access is conditional on legitimate course, employer or library provision; optional depth references are not automatic extra purchases." }, { "id": "ISO09", "title": "Official selected-route course and its activities", "teaching": "The selected PECB route requires its official Foundation course. This independent public site and reference reading do not satisfy that requirement.", "practice": "Use official course activities and feedback, then follow the issuer’s separate assessment and application rules.", "access": "Paid selected route. PECB describes exam/certificate fees as included in training. Confirm package, duration, language, feedback, voucher and retake terms before payment." }, { "id": "PRACTICE_CC", "title": "Fresh current CC practice with checked answers", "teaching": "Fresh mixed/full-assessment practice aligned to all 19 current CC objectives and AI applications, with authorized provenance and explained answers.", "practice": "Check current domain/AI coverage and rationales before use; complete unseen practice and review errors. Fixed tests do not reproduce CAT, and a mock percentage is not an exam pass prediction.", "access": "Additional CC teaching/practice may be free or optionally paid. No full mock or official training purchase is a CC eligibility rule; confirm current contents and terms." }, { "id": "PRACTICE_ISO", "title": "Current PECB Foundation practice and feedback", "teaching": "Fresh PECB-aligned application/evaluation practice across both domains and all 65 statements, with authorized keys and feedback.", "practice": "Inspect included official practice first. Five public samples without a complete verified key, or another issuer’s sample, do not constitute a current PECB full mock.", "access": "Use practice included in the selected paid PECB package first. A supplemental purchase is conditional on an evidenced remaining gap." } ], "guide_source_review": { "date": "2026-10-29", "kind": "second_review_of_all_nineteen_guides", "changes": [ "Evidence-versus-proposal timeline repair", "Comparable anomaly windows and classification", "Explicit risk direction and role separation", "ISO continuity, awareness, measures, party requirements and source exclusions", "Course ethics/deadline/package distinctions", "Scope register and route separation" ], "coverage_summary": { "cc_objectives_checked": 19, "cc_printed_bullet_positions_checked": 59, "cc_ai_applications_checked": 5, "pecb_statements_checked": 65, "complete_exam_coverage_claimed": false, "pass_prediction": false }, "independent_review": { "guide_count": 19, "all_assigned_guide_fields_reread": true, "original_need_components_reviewed": true, "primary_source_scope_review": "All assigned passages were rechecked through publisher text or registered original public PDFs; individual access/version limits are retained in source records.", "separate_subject_reviews": 3, "corrections_integrated": true, "learner_work_assessed": false, "full_licensed_normative_text_checked": false, "quiz_855_semantically_rereviewed_in_this_update": false, "coverage_register": "exam-coverage.html" } } }