Many organizations face difficulty in identifying and prioritizing their cybersecurity risks. Learners will conduct a risk assessment, document vulnerabilities, and deliver actionable remediation recommendations in a professional format.

• Evaluate the cybersecurity posture of a small-to-medium business (SMB) or simulated environment. Identify vulnerabilities, assess risks, and develop a prioritized mitigation plan aligned to industry standards (e.g., NIST, ISO).

Tasks and Activities:

• Review the organization’s IT environment or case study
• Conduct asset identification and classification
• Identify potential threats, vulnerabilities, and business impacts
• Use a basic risk matrix to assess severity and likelihood
• Align findings with NIST or ISO compliance frameworks
• Recommend controls and remediation actions
• Draft a formal Cybersecurity Risk Assessment Report
• Create a visual summary or infographic for stakeholder communication

Deliverables:

• Cybersecurity Risk Assessment Report
• Risk Matrix and Prioritization Table
• Remediation Plan with Recommended Controls
• Executive Summary Slide Deck or Infographic