Module 4 Overview

Theme

Scenario analysis and stress testing

Essential Question

How do we reason about uncertain attacks?

Module Components

• Book prose: conceptual framing, domain scenario, methods, and failure modes

• Assignment: evidence-backed production of a specific artifact

• Slides: presentation sequence for seminar or lecture delivery

• Narration: spoken version of the slide flow

• Instructor notes: facilitation plan, discussion prompts, and grading cues

• Rubric: criteria for evaluating the module artifact

• Notebook: executable lab aligned with the module theme using synthetic asset risk records with exposure, vulnerability severity, control strength, threat activity, and business impact

Module Artifact

cyber risk assessment package with scoring rationale, treatment plan, and executive dashboard focused on scenario analysis and stress testing: Run scenario-based risk analysis.

Professional Setting

Students work as if advising a cyber risk committee prioritizing mitigation across assets with different exposure and business value. Their work must be intelligible to CISO, risk officer, system owner, auditor, and executive sponsor.