Homework — Lesson 01
Two short tasks · ~30 minutes · Bring your answers to Day 2
These tasks turn the persistent-threat lens onto your own organisation. They are reflective, not technical — there is nothing to install and nothing to attack.
Task 1 — Map one technique to one control category
Take any single stage from the lesson's kill-chain (Recon, Resource Development, Initial Access, Credential Access, or Collection & Exfiltration). In your own words:
- Describe how that stage would realistically play out against you or a principal you support.
- Name one control category (not a product) that would raise the adversary's cost at that stage.
- State who in your organisation owns the decision to fund or mandate it.
✓ Self-check: your control is a category (e.g. "phishing-resistant authentication"), not a brand; and you named a decision-owner, not "IT" in general.
Task 2 — Your three half-truths
Write down three reassurances you have personally heard inside your organisation that, after this lesson, you would now treat as the start of a conversation. For each, write the single next question you would ask.
✓ Self-check: each reassurance is paired with a specific, answerable next question — not a rhetorical one.
Task 3 (optional) — One fragment you can deny this week
Identify one public fragment about yourself (a calendar pattern, a published itinerary, a personal detail in a bio) that aids reconnaissance, and decide whether you will remove it, reduce it, or accept it. Write one line on your decision and why.
✓ Self-check: you made an explicit decision (remove / reduce / accept) with a reason — accepting a risk knowingly is a valid answer.