Connect technical controls with ownership and business resilience.
Connect technology with threats, controls and evidence.
Explore roles and build small, safe pieces of work you can explain.
Make decisions about risk, assessment, incident response and recovery.