See the scope.
Keep the limits visible.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.4, objective 1.1 · Read the full publisher wording

Related lessons: 2 · Confidentiality, integrity, availability, privacy and AAA, 9 · Authentication, passwords and MFA, 15 · Encryption, hashing, signatures and quantum-resistant cryptography

Selected new guides: AI01 · AI governance, risk appetite and control choice, AI05 · AI workspace inputs, version changes and testing

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 1.1.01 Confidentiality
• 1.1.02 Integrity
• 1.1.03 Availability
• 1.1.04 AAA
• 1.1.05 Non-repudiation
• 1.1.06 Privacy

Remaining depth: No one scenario demonstrates every protection goal or all identity and cryptographic evidence.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.4, objective 1.2 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: AI01 · AI governance, risk appetite and control choice

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 1.2.01 Risk loop
• 1.2.02 Risk activities

Remaining depth: The adoption case applies a limited decision method; wider methods and fresh transfer cases need further study.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.4, objective 1.3 · Read the full publisher wording

Related lessons: 3 · Governance, controls, frameworks and policies

Selected new guides: AI01 · AI governance, risk appetite and control choice

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 1.3.01 Laws/regulations
• 1.3.02 Frameworks/guidance
• 1.3.03 Policies/standards/procedures

Remaining depth: Jurisdiction-specific obligations and broad framework comparisons are not fully taught by these guides.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.4, objective 1.4 · Read the full publisher wording

Related lessons: 3 · Governance, controls, frameworks and policies

Selected new guides: AI01 · AI governance, risk appetite and control choice, CC05 · Physical/social security tests and interpreting findings

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 1.4.01 Technology
• 1.4.02 Management measures
• 1.4.03 Physical measures

Remaining depth: The examples illustrate selected controls, not every control class or real implementation.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.4, objective 1.5 · Read the full publisher wording

Related lessons: 4 · Professional conduct, due care and due diligence

Selected new guides: AI01 · AI governance, risk appetite and control choice, CC05 · Physical/social security tests and interpreting findings

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 1.5.01 Professional conduct
• 1.5.02 Care/diligence
• 1.5.03 ISC2 ethics

Remaining depth: Read the issuer ethics requirements separately; a scoped permission decision is not complete ethics preparation.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.5, objective 2.1 · Read the full publisher wording

Related lessons: 3 · Governance, controls, frameworks and policies, 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: AI01 · AI governance, risk appetite and control choice

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 2.1.01 Purpose
• 2.1.02 Value
• 2.1.03 Methods/tools

Remaining depth: One decision record does not establish full framework/tool breadth or assessment.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.5, objective 2.2 · Read the full publisher wording

Related lessons: 7 · Business continuity, disaster recovery and recovery objectives

Selected new guides: AI02 · AI continuity, model drift, awareness and measures

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 2.2.01 Continuing service
• 2.2.02 Recovering systems

Remaining depth: Paper dependencies/fallback are supplied; no restoration or full service recovery design has been tested.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.5, objective 2.3 · Read the full publisher wording

Related lessons: 6 · Awareness, social engineering and security culture, 9 · Authentication, passwords and MFA

Selected new guides: CC05 · Physical/social security tests and interpreting findings, AI02 · AI continuity, model drift, awareness and measures

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 2.3.01 Organizational habits
• 2.3.02 Manipulation defenses

Remaining depth: Synthetic roleplay and verification examples do not cover every culture, password or phishing scenario.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.5, objective 2.4 · Read the full publisher wording

Related lessons: 8 · Measures, metrics, risk indicators and management reporting

Selected new guides: AI02 · AI continuity, model drift, awareness and measures

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 2.4.01 Decision indicators
• 2.4.02 Management reporting

Remaining depth: The KRI is worked; complete dashboard/scorecard production and evaluation require wider practice.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.5, objective 3.1 · Read the full publisher wording

Related lessons: 9 · Authentication, passwords and MFA, 10 · Identity lifecycle, least privilege and access-control models

Selected new guides: No dedicated new guide is mapped at this position.

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 3.1.01 Roles
• 3.1.02 Provisioning
• 3.1.03 Review
• 3.1.04 Deprovisioning
• 3.1.05 Frameworks/tools

Remaining depth: These nineteen additions have no dedicated full identity-lifecycle guide. Existing lessons/term practice are orientation; complete workflow/tool application is unverified.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.5, objective 3.2 · Read the full publisher wording

Related lessons: 9 · Authentication, passwords and MFA, 10 · Identity lifecycle, least privilege and access-control models

Selected new guides: CC04 · Network zones, ports and application-aware controls

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 3.2.01 Minimum rights
• 3.2.02 Conflicting duties
• 3.2.03 Permission approaches

Remaining depth: CC04 illustrates a service/user permission boundary; it does not teach all models, duty conflicts or lifecycle decisions.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.6, objective 4.1 · Read the full publisher wording

Related lessons: 11 · Networks, layers, addresses, names and ports, 12 · Firewalls, zones, segmentation, Zero Trust and VPN boundaries, 13 · Wi-Fi, Bluetooth, embedded systems, OT, ICS and IoT

Selected new guides: CC04 · Network zones, ports and application-aware controls, AI04 · AI-assisted network detection and cloud responsibility

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 4.1.01 Layers/addresses/tunnels
• 4.1.02 Traffic enforcement
• 4.1.03 Radio networks
• 4.1.04 Connected devices

Remaining depth: CC04/AI04 target flows/detection and one connected-device context. Full model/address/VPN/wireless breadth needs the linked lessons and further practice.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.6, objective 4.2 · Read the full publisher wording

Related lessons: 12 · Firewalls, zones, segmentation, Zero Trust and VPN boundaries

Selected new guides: CC04 · Network zones, ports and application-aware controls

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 4.2.01 Segmentation
• 4.2.02 Defense in depth
• 4.2.03 Zero Trust

Remaining depth: The flow case does not fully exercise VLAN/microsegmentation, layered design or Zero Trust implementation.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.6, objective 4.3 · Read the full publisher wording

Related lessons: 14 · Cloud characteristics, service models and responsibilities

Selected new guides: AI04 · AI-assisted network detection and cloud responsibility

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 4.3.01 Cloud properties
• 4.3.02 Service boundaries
• 4.3.03 Deployment patterns
• 4.3.04 Split responsibilities

Remaining depth: One responsibility scenario does not complete cloud characteristics or deployment-model breadth.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.7, objective 5.1 · Read the full publisher wording

Related lessons: 15 · Encryption, hashing, signatures and quantum-resistant cryptography, 16 · Classifying, labelling, masking, retaining and sanitizing data

Selected new guides: CC06 · Incident plan, data handling and exercise feedback, AI05 · AI workspace inputs, version changes and testing

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 5.1.01 Handling rules
• 5.1.02 Cryptographic protection

Remaining depth: Input/evidence cases do not supply complete encryption, hashing or post-quantum teaching and practice.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.7, objective 5.2 · Read the full publisher wording

Related lessons: 17 · Logging, monitoring, SIEM, correlation and triage, 18 · Threat actors, threat intelligence and ATT&CK

Selected new guides: CC06 · Incident plan, data handling and exercise feedback, CC08 · Threat intelligence: report → behaviour → defensive action, AI04 · AI-assisted network detection and cloud responsibility, AI05 · AI workspace inputs, version changes and testing

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 5.2.01 Event records
• 5.2.02 Priority decisions
• 5.2.03 Adversary context
• 5.2.04 Intelligence products
• 5.2.05 Behavior frameworks

Remaining depth: Evidence and selected mappings are worked; wider actor, SIEM, correlation and framework cases remain unverified.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.7, objective 5.3 · Read the full publisher wording

Related lessons: 19 · Incident response, evidence and tabletop exercises

Selected new guides: CC06 · Incident plan, data handling and exercise feedback

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 5.3.01 Plan-linked handling
• 5.3.02 Response exercises

Remaining depth: A tabletop model is supplied; the learner, organization and real response capability have not been assessed.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.7, objective 5.4 · Read the full publisher wording

Related lessons: 20 · Asset lifecycle, configuration, change and patch management

Selected new guides: AI05 · AI workspace inputs, version changes and testing

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 5.4.01 Assets through retirement
• 5.4.02 Controlled changes

Remaining depth: The AI change case does not cover the full supported-asset/EOL and configuration lifecycle.

INTRODUCTORY REFERENCES · COMPLETE COVERAGE UNVERIFIED

English outline, viewer p.7, objective 5.5 · Read the full publisher wording

Related lessons: 21 · Security testing, team exercises and threat modelling

Selected new guides: CC05 · Physical/social security tests and interpreting findings, AI05 · AI workspace inputs, version changes and testing

Printed bullet positions checked below. These short labels do not replace the publisher’s parenthesized examples. A listed position is not a completed learning outcome.

• 5.5.01 Readiness tests and teams
• 5.5.02 Application test methods
• 5.5.03 People/physical tests

Remaining depth: Paper roleplay/release tests do not complete team exercises, static/dynamic analysis, scanning or all threat-modeling practice.

SELECTED APPLICATIONS · COMPLETE COVERAGE UNVERIFIED

CC AI guidance, viewer p.4 / printed3 · Read the full publisher wording

Related lessons: 2 · Confidentiality, integrity, availability, privacy and AAA, 3 · Governance, controls, frameworks and policies, 4 · Professional conduct, due care and due diligence, 5 · Risk concepts, scenarios, assessment and treatment, 22 · AI fundamentals and applications across the CC domains

Selected new guides: AI01 · AI governance, risk appetite and control choice, AI05 · AI workspace inputs, version changes and testing

Remaining depth: Selected principles are illustrated. Full AAA/non-repudiation, poisoning, ethics and control-type applications are not established by these two guides.

SELECTED APPLICATIONS · COMPLETE COVERAGE UNVERIFIED

CC AI guidance, viewer p.4–5 / printed3–4 · Read the full publisher wording

Related lessons: 6 · Awareness, social engineering and security culture, 7 · Business continuity, disaster recovery and recovery objectives, 8 · Measures, metrics, risk indicators and management reporting, 17 · Logging, monitoring, SIEM, correlation and triage, 19 · Incident response, evidence and tabletop exercises, 22 · AI fundamentals and applications across the CC domains

Selected new guides: AI02 · AI continuity, model drift, awareness and measures, CC06 · Incident plan, data handling and exercise feedback

How these references help: AI02 supplies direct AI paper practice. CC06 supplies general incident-plan, evidence and tabletop foundations; it is not an AI-assisted detection exercise.

Remaining depth: Dependencies, KRI and impersonation are worked. No real restore, full dashboard or complete early-detection/triage workflow is validated.

SELECTED APPLICATIONS · COMPLETE COVERAGE UNVERIFIED

CC AI guidance, viewer p.5 / printed4 · Read the full publisher wording

Related lessons: 9 · Authentication, passwords and MFA, 10 · Identity lifecycle, least privilege and access-control models, 22 · AI fundamentals and applications across the CC domains

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: No dedicated new paper guide supplies the bot-identity lifecycle and behavioral-login application. Lessons 9, 10 and 22 provide authentication/lifecycle foundations and brief non-human-access orientation. A checked case covering role definition, provisioning, review, deprovisioning, least privilege, duty conflicts and anomalous-login/MFA decisions remains a practice gap. No learner performance has been assessed.

SELECTED APPLICATIONS · COMPLETE COVERAGE UNVERIFIED

CC AI guidance, viewer p.5–6 / printed4–5 · Read the full publisher wording

Related lessons: 11 · Networks, layers, addresses, names and ports, 12 · Firewalls, zones, segmentation, Zero Trust and VPN boundaries, 13 · Wi-Fi, Bluetooth, embedded systems, OT, ICS and IoT, 14 · Cloud characteristics, service models and responsibilities, 22 · AI fundamentals and applications across the CC domains

Selected new guides: CC04 · Network zones, ports and application-aware controls, AI04 · AI-assisted network detection and cloud responsibility

How these references help: AI04 supplies direct anomaly, device-context and cloud-responsibility paper practice. CC04 supplies general zones/flows/permission foundations; it does not itself work through isolation of AI development from sensitive production data.

Remaining depth: Selected flow, anomaly and responsibility cases are supplied. Full layer/address/VPN, cloud and architecture breadth remains beyond them.

SELECTED APPLICATIONS · COMPLETE COVERAGE UNVERIFIED

CC AI guidance, viewer p.6 / printed5 · Read the full publisher wording

Related lessons: 15 · Encryption, hashing, signatures and quantum-resistant cryptography, 16 · Classifying, labelling, masking, retaining and sanitizing data, 17 · Logging, monitoring, SIEM, correlation and triage, 18 · Threat actors, threat intelligence and ATT&CK, 19 · Incident response, evidence and tabletop exercises, 20 · Asset lifecycle, configuration, change and patch management, 21 · Security testing, team exercises and threat modelling, 22 · AI fundamentals and applications across the CC domains

Selected new guides: CC05 · Physical/social security tests and interpreting findings, CC06 · Incident plan, data handling and exercise feedback, CC08 · Threat intelligence: report → behaviour → defensive action, AI05 · AI workspace inputs, version changes and testing

How these references help: AI05 supplies direct AI input/change/test/rollback practice. CC05, CC06 and CC08 supply general testing, incident/evidence and intelligence foundations. Those related cases do not establish AI-specific operational validation.

Remaining depth: Selected input, change, incident and test decisions are worked. Full cryptography, SIEM correlation, asset/EOL and test-type breadth is not completed.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 1 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 2 · Read the full publisher wording

Related lessons: 3 · Governance, controls, frameworks and policies, 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 3 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 4 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: ISO02 · Context, scope, interested parties and leadership, ISO04 · Objectives, support and documented information, ISO05 · Operational planning, control and reassessment, ISO06 · Monitoring, internal audit and management review, ISO07 · Nonconformity, corrective action and improvement

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.8, C column, item 5 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA, 24 · Organizational context, scope, parties, leadership and policy, 25 · ISMS objectives, risk treatment, applicability and controls, 26 · Support, competence, communication, documented information and operation, 27 · Performance evaluation, audit types and management review, 28 · Nonconformity, correction, causes, corrective action and improvement

Selected new guides: ISO02 · Context, scope, interested parties and leadership, ISO03 · Risk method, treatment and Statement of Applicability, ISO04 · Objectives, support and documented information, ISO05 · Operational planning, control and reassessment, ISO06 · Monitoring, internal audit and management review, ISO07 · Nonconformity, corrective action and improvement

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 6 · Read the full publisher wording

Related lessons: 2 · Confidentiality, integrity, availability, privacy and AAA, 3 · Governance, controls, frameworks and policies, 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: AI01 · AI governance, risk appetite and control choice

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 7 · Read the full publisher wording

Related lessons: 1 · Everyday computing, information and assets, 2 · Confidentiality, integrity, availability, privacy and AAA

Selected new guides: ISO02 · Context, scope, interested parties and leadership, AI02 · AI continuity, model drift, awareness and measures

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 8 · Read the full publisher wording

Related lessons: 2 · Confidentiality, integrity, availability, privacy and AAA

Selected new guides: AI01 · AI governance, risk appetite and control choice, AI05 · AI workspace inputs, version changes and testing

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 9 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 10 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, C column, item 11 · Read the full publisher wording

Related lessons: 14 · Cloud characteristics, service models and responsibilities, 22 · AI fundamentals and applications across the CC domains

Selected new guides: AI01 · AI governance, risk appetite and control choice, AI02 · AI continuity, model drift, awareness and measures, AI04 · AI-assisted network detection and cloud responsibility, AI05 · AI workspace inputs, version changes and testing

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 1 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 2 · Read the full publisher wording

Related lessons: 3 · Governance, controls, frameworks and policies, 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 3 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 4 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: No dedicated new guide is mapped at this position.

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 5 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: ISO02 · Context, scope, interested parties and leadership, ISO04 · Objectives, support and documented information, ISO05 · Operational planning, control and reassessment, ISO06 · Monitoring, internal audit and management review, ISO07 · Nonconformity, corrective action and improvement

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.8, K column, item 6 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA, 24 · Organizational context, scope, parties, leadership and policy, 25 · ISMS objectives, risk treatment, applicability and controls, 26 · Support, competence, communication, documented information and operation, 27 · Performance evaluation, audit types and management review, 28 · Nonconformity, correction, causes, corrective action and improvement

Selected new guides: ISO02 · Context, scope, interested parties and leadership, ISO03 · Risk method, treatment and Statement of Applicability, ISO04 · Objectives, support and documented information, ISO05 · Operational planning, control and reassessment, ISO06 · Monitoring, internal audit and management review, ISO07 · Nonconformity, corrective action and improvement

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 7 · Read the full publisher wording

Related lessons: 23 · What an ISMS is, the standards family and PDCA

Selected new guides: ISO06 · Monitoring, internal audit and management review, ISO07 · Nonconformity, corrective action and improvement

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 8 · Read the full publisher wording

Related lessons: 2 · Confidentiality, integrity, availability, privacy and AAA, 3 · Governance, controls, frameworks and policies, 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: AI01 · AI governance, risk appetite and control choice

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 9 · Read the full publisher wording

Related lessons: 1 · Everyday computing, information and assets, 2 · Confidentiality, integrity, availability, privacy and AAA, 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 10 · Read the full publisher wording

Related lessons: 2 · Confidentiality, integrity, availability, privacy and AAA

Selected new guides: AI01 · AI governance, risk appetite and control choice, AI05 · AI workspace inputs, version changes and testing

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 11 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

INTRODUCTORY REFERENCES · UNVERIFIED DEPTH

Handbook v1.5, viewer/printed p.8, K column, item 12 · Read the full publisher wording

Related lessons: 14 · Cloud characteristics, service models and responsibilities, 22 · AI fundamentals and applications across the CC domains

Selected new guides: AI01 · AI governance, risk appetite and control choice, AI02 · AI continuity, model drift, awareness and measures, AI04 · AI-assisted network detection and cloud responsibility, AI05 · AI workspace inputs, version changes and testing

Remaining depth: An introductory reference is located; full statement-level understanding and independent application have not been established.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 1 · Read the full publisher wording

Related lessons: 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 2 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO02 · Context, scope, interested parties and leadership

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 3 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO02 · Context, scope, interested parties and leadership

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 4 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO02 · Context, scope, interested parties and leadership

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

EXACT PROVIDER DEFINITIONS STILL MISSING

Handbook v1.5, viewer/printed p.9, C column, item 5 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO01 · The exact three PECB policy categories

Remaining depth: Exact current provider category boundaries and a verified classification key remain unavailable.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 6 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO01 · The exact three PECB policy categories

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 7 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 8 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 9 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 10 · Read the full publisher wording

Related lessons: 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 11 · Read the full publisher wording

Related lessons: 6 · Awareness, social engineering and security culture, 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 12 · Read the full publisher wording

Related lessons: 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO02 · Context, scope, interested parties and leadership, ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 13 · Read the full publisher wording

Related lessons: 6 · Awareness, social engineering and security culture, 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 14 · Read the full publisher wording

Related lessons: 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 15 · Read the full publisher wording

Related lessons: 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO05 · Operational planning, control and reassessment

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 16 · Read the full publisher wording

Related lessons: 8 · Measures, metrics, risk indicators and management reporting, 27 · Performance evaluation, audit types and management review

Selected new guides: ISO06 · Monitoring, internal audit and management review

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 17 · Read the full publisher wording

Related lessons: 27 · Performance evaluation, audit types and management review

Selected new guides: ISO06 · Monitoring, internal audit and management review

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 18 · Read the full publisher wording

Related lessons: 28 · Nonconformity, correction, causes, corrective action and improvement

Selected new guides: ISO07 · Nonconformity, corrective action and improvement

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 19 · Read the full publisher wording

Related lessons: 27 · Performance evaluation, audit types and management review

Selected new guides: ISO06 · Monitoring, internal audit and management review

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, C column, item 20 · Read the full publisher wording

Related lessons: 28 · Nonconformity, correction, causes, corrective action and improvement

Selected new guides: ISO07 · Nonconformity, corrective action and improvement

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 1 · Read the full publisher wording

Related lessons: 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 2 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO02 · Context, scope, interested parties and leadership

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 3 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO02 · Context, scope, interested parties and leadership

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 4 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO02 · Context, scope, interested parties and leadership

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

EXACT PROVIDER DEFINITIONS STILL MISSING

Handbook v1.5, viewer/printed p.9, K column, item 5 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO01 · The exact three PECB policy categories

Remaining depth: Exact current provider category boundaries and a verified classification key remain unavailable.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 6 · Read the full publisher wording

Related lessons: 24 · Organizational context, scope, parties, leadership and policy

Selected new guides: ISO01 · The exact three PECB policy categories

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 7 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 8 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 9 · Read the full publisher wording

Related lessons: 5 · Risk concepts, scenarios, assessment and treatment, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 10 · Read the full publisher wording

Related lessons: 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO03 · Risk method, treatment and Statement of Applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 11 · Read the full publisher wording

Related lessons: 6 · Awareness, social engineering and security culture, 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 12 · Read the full publisher wording

Related lessons: 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO02 · Context, scope, interested parties and leadership, ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 13 · Read the full publisher wording

Related lessons: 6 · Awareness, social engineering and security culture, 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 14 · Read the full publisher wording

Related lessons: 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO04 · Objectives, support and documented information

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 15 · Read the full publisher wording

Related lessons: 26 · Support, competence, communication, documented information and operation

Selected new guides: ISO05 · Operational planning, control and reassessment

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 16 · Read the full publisher wording

Related lessons: 8 · Measures, metrics, risk indicators and management reporting, 27 · Performance evaluation, audit types and management review

Selected new guides: ISO06 · Monitoring, internal audit and management review

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 17 · Read the full publisher wording

Related lessons: 27 · Performance evaluation, audit types and management review

Selected new guides: ISO06 · Monitoring, internal audit and management review

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 18 · Read the full publisher wording

Related lessons: 28 · Nonconformity, correction, causes, corrective action and improvement

Selected new guides: ISO07 · Nonconformity, corrective action and improvement

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 19 · Read the full publisher wording

Related lessons: 27 · Performance evaluation, audit types and management review

Selected new guides: ISO06 · Monitoring, internal audit and management review

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 20 · Read the full publisher wording

Related lessons: 28 · Nonconformity, correction, causes, corrective action and improvement

Selected new guides: ISO07 · Nonconformity, corrective action and improvement

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 21 · Read the full publisher wording

Related lessons: 3 · Governance, controls, frameworks and policies, 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO08 · Annex A control purposes, functions and applicability

Remaining depth: Selected cases are available; exact current requirements/control breadth and fresh authorized application/evaluation feedback remain incomplete.

PARTIAL · AUTHORIZED DEPTH / FEEDBACK NEEDED

Handbook v1.5, viewer/printed p.9, K column, item 22 · Read the full publisher wording

Related lessons: 25 · ISMS objectives, risk treatment, applicability and controls

Selected new guides: ISO08 · Annex A control purposes, functions and applicability

Remaining depth: Complete authorized teaching across all 93 controls and a justified full-set comparison remain incomplete; four-theme examples do not close this need.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 3.2, 4.1, 4.2

CC AI sections: AI-D4

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Zones and enforced communication
• Allowed/blocked flow artifact
• Packet/connection and application distinction
• Stateful replies versus reverse initiation
• Management path
• Reachability counterexample and safe verification

Payment and access: FREE for the selected readings and complete editorial paper exercise. No paid course or simulator is needed for this bounded gap. Extra current CC teaching, live labs or independent marking are optional purchases; exam/credential charges are separate.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 1.4, 1.5, 2.3, 5.5

CC AI sections: AI-D5

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Authority, location, participants, time and exclusions
• Prohibitions and safety/escalation
• Evidence and interpretation
• Finding and business meaning
• Cause, improvement, owner and retest

Payment and access: FREE primary planning/evaluation readings and a complete paper case with explained model. No paid tester or course is needed for this introductory learning task; any future professional testing is a separate decision requiring its own scope and authority.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 5.1, 5.2, 5.3

CC AI sections: AI-D2, AI-D5

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Plan, authority and classification supplied before exercise
• Incident criterion and disclosure uncertainty
• Timeline and provenance
• Handling record
• Decision/escalation and recovery
• After-action feedback and action verification

Payment and access: FREE selected primary readings and the complete integrated tabletop with explained records. A paid exercise facilitator or commercial CC course is not required for this bounded introductory case. Specialist operational training, independent feedback and exam fees are separate decisions.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 5.2

CC AI sections: AI-D5

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Source/context/relevance/confidence
• Behavior-to-current-mapping reasoning
• Priorities and defensive action
• Proposed validation and evidence
• Management communication and historical extension

Payment and access: FREE primary mapping lessons, technique pages, optional publisher ticket/key and the explained editorial case. No paid intelligence feed, software, commercial bank or course is required for this bounded objective. Independent assessment and advanced operational training remain separate optional choices.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 1.1, 1.2, 1.3, 1.4, 1.5, 2.1

CC AI sections: AI-D1

PECB positions: D1-C06, D1-C08, D1-C11, D1-K08, D1-K10, D1-K12

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Worked adoption decision; asset/use/data/affected people/manual alternative
• Risk appetite, tolerance, approval/stop authority
• Accountability and reviewed decision artifact
• Data/model protection and privacy
• Ethical harms and control trade-offs
• Plausible harms, selected controls, residual risk and escalation decision
• Evidence calculations and checked guidance

Payment and access: No payment is needed for these selected readings or the paper case. Paid current teaching/marked support is optional, with exact coverage and actual feedback to be verified before purchase; no paid AI credential is required by this selection.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 2.2, 2.3, 2.4

CC AI sections: AI-D2

PECB positions: D1-C07, D1-C11, D1-K12

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Recovery/dependency walkthrough for models/configuration/data
• Checked asset/dependency/recovery-owner table
• Fallback/restore explanation
• Drift/KRI decision and all required metric fields
• Response to AI-enabled impersonation

Payment and access: Selected reading and the complete paper case are free. A hosted model/API/Sentinel or other cloud lab can incur service/compute charges and is not needed. Paid marked support remains optional and unverified; do not buy a course merely because its catalogue says AI or continuity.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 4.1, 4.3, 5.2

CC AI sections: AI-D4

PECB positions: D1-C11, D1-K12

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Clear IDS/firewall and detection/prevention distinction
• Anomaly limits and one plausible false positive
• Wireless/embedded implications at concept level
• AI hosting stated model and reviewed owner table
• Owner/action/bounded tuning/escalation

Payment and access: Assigned reading and the complete paper case are free. Azure/Sentinel/API/compute charges are separate; no service launch, account, trial or paid lab is needed. Paid guided labs/feedback are optional only after their exact requirements and coverage are checked.

INTRODUCTORY MATERIAL SUPPLIED

Open the reviewed guide · Remaining needs and payment

CC numbered positions: 1.1, 5.1, 5.2, 5.4, 5.5

CC AI sections: AI-D1, AI-D5

PECB positions: D1-C08, D1-C11, D1-K10, D1-K12

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Worked permitted/prohibited/conditional input policy
• Protective handling and event escalation
• Version/change record
• Security tests, predefined gates and blocked release
• Failure escalation and retest evidence
• Release/rollback evidence and fallback

Payment and access: The selected text and paper case are free. The separate Microsoft Foundry guardrails lab explicitly requires an Azure subscription and deploys a model; it is outside the free route and may incur service/compute charges. No purchase/sign-up is needed here. Paid marked practice remains optional with feedback/coverage to verify.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D2-C05, D2-C06, D2-K05, D2-K06

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: Free lifecycle supplement. The selected PECB course remains paid; use its included definitions/examples/feedback before considering any extra purchase.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D1-C04, D1-C05, D1-C07, D1-K05, D1-K06, D2-C02, D2-C03, D2-C04, D2-C12, D2-K02, D2-K03, D2-K04, D2-K12

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: These readings and the editorial exercise are free. Selected official PECB course remains paid. Standards access is conditional on legitimate included, employer or library provision; avoid duplicate purchases.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D1-C05, D1-C09, D1-C10, D1-K06, D1-K09, D1-K11, D2-C07, D2-C08, D2-C09, D2-C10, D2-K07, D2-K08, D2-K09, D2-K10

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: Free examples improve method and decision practice. They do not replace the paid selected PECB course or licensed requirements/control guidance; check included legitimate access first.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D1-C04, D1-C05, D1-K05, D1-K06, D2-C01, D2-C11, D2-C12, D2-C13, D2-C14, D2-K01, D2-K11, D2-K12, D2-K13, D2-K14

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: All assigned guidance and this exercise are free. The selected PECB course and its activities remain paid; required standards access may already be included or otherwise legitimately available.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D1-C04, D1-C05, D1-K05, D1-K06, D2-C15, D2-K15

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: Free operational case and source readings. Official PECB course remains the selected paid route; no extra commercial tool, provider or practical lab purchase is implied.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D1-C04, D1-C05, D1-K05, D1-K06, D1-K07, D2-C16, D2-C17, D2-C19, D2-K16, D2-K17, D2-K19

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: Free readings and editorial evidence case. Complete selected paid PECB activities; legitimate licensed standards access may be included or otherwise available.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D1-C04, D1-C05, D1-K05, D1-K06, D1-K07, D2-C18, D2-C20, D2-K18, D2-K20

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: Free concept teaching and original worked case. The selected official PECB course remains paid; no separate corrective-action software or extra course purchase is assumed.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: D2-K21, D2-K22

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: Selected guidance/examples are free. Full licensed control guidance and the selected paid PECB course are not replaced; first confirm legitimate standards access and control activities already included in the package.

OFFICIAL NEED REMAINS OPEN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: OPEN / PAID SELECTED ROUTE. Current handbook requires the official course; free reading cannot satisfy this requirement. Public course information describes exam/certificate fees as included in training. Confirm the total written package, access period, language, keys/feedback and retake conditions before paying; no purchase was made. The current handbook gives a 12-month completion/application cycle from instructor-led course completion, or from purchase for self-study/eLearning. Record that trigger date. Its standalone exam $500 and certificate $200 figures must not be added automatically to a paid partner-training package that includes the course, first attempt, first retake and certificate application. Confirm the actual offer and current terms.

PARTIAL · NEEDS REMAIN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Current scope and access rules
• Authorized short questions and explained answers
• Coverage record and practice/error review
• Fresh mixed/full assessment
• CAT and interface limits
• Independent marking and costs

Payment and access: These public readings, the inspected individual knowledge-check feedback and this paper activity are free. Full official training/assessments are paid options for new applicants after the old program closed; they are not a CC exam-entry requirement. Existing access is personal and time-limited. Exam and later maintenance charges follow issuer terms; no purchase was made.

OFFICIAL NEED REMAINS OPEN

Open the reviewed guide · Remaining needs and payment

CC numbered positions: No direct numbered-objective teaching claim.

CC AI sections: No direct AI-section teaching claim.

PECB positions: Course/assessment orientation or no direct statement teaching claim.

These are selected related scope positions, not a claim that the guide teaches the entire objective/application/statement. Full scope and remaining depth are in the coverage register.

What was checked

• Scenario and evidence
• All assigned tasks
• All explained model items
• Self-checks
• Assigned readings
• Unresolved original need

Payment and access: OPEN. Inspect legitimate practice included in the selected paid PECB package first. A separate bank is optional and justified only by an evidenced remaining gap; no paid provider or bank was started.