Completed
Acceptable use of generative AI
Two-page corporate policy for a hypothetical company: purpose, scope, restrictions, and enforcement. Restrictions cover uploading proprietary source code or customer data into public AI models.
PDFIT professional with skills ranging from technical knowledge to collaboration across teams to meet a common goal. Moving into governance, risk, and compliance.
Practice work for a hypothetical company. Not client deliverables.
Completed
Two-page corporate policy for a hypothetical company: purpose, scope, restrictions, and enforcement. Restrictions cover uploading proprietary source code or customer data into public AI models.
PDFCompleted
Ten questions used to vet external software providers before procurement. Covers encryption in transit and at rest, independent audit schedule, and incident-notification timelines, drawn from NIST and SOC 2 topics.
SpreadsheetCompleted
Spreadsheet of corporate security scenarios, including unencrypted cloud storage and delayed access revocation. Scores inherent likelihood and impact, names a mitigating control, and shows residual risk.
SpreadsheetCompleted
Five core controls, including multi-factor authentication and incident-response testing, mapped to NIST CSF 2.0, SOC 2 Common Criteria, and ISO 27001.
SpreadsheetCompleted
Three-page executive report on a hypothetical company that must reach SOC 2 in six months. Each gap gets a remediation path, a resource need, and a timeline.
Document