Explain a security risk to management
Turn a technical finding into a clear business decision, with a worked example.
The technical finding
A former employee’s account still has access to the finance reporting application. Account revocation is manual and no verification record exists.
The business consequence
An unauthorised user could access financial information or make changes, affecting confidentiality, reporting integrity and accountability.
The decision brief
Recommend immediate revocation and verification, then a departure workflow with named owners and a completion deadline. Explain the effort, interim controls, residual risk and the decision management must make.
Adapt the resource to your organisation’s scope, risk methodology, policies and applicable requirements. Examples are fictional and intended for learning.
Created by CyberJA Academy. Free for personal learning and internal use. Do not enter sensitive organisational information into the assessment.