Hands‑On Lab: Core Conceptual Elements of Information Security

Complete the activities in order. Your score is tracked locally in the browser (no data is sent anywhere).

Use the scenario to identify elements and explain the chain.

Classify at least 8 controls by category (technical/managerial/operational/physical) and type (preventive/detective/corrective/etc.).

Map how one vulnerability moves through: identification → analysis → prioritization → remediation → verification → reporting → continuous monitoring.

Identify threat actors, vectors, and attack surface for the scenario in Activity 1.

Explain feedback loops: how controls change risk, how monitoring feeds back into vulnerability management.

Discuss: Which element (asset, vulnerability, threat, control) is most often misunderstood in your organization?