This week shifted into CYBR-510 Security Test Engineering. The main focus was moving from general security concepts into structured assurance, risk measurement, and test prioritization.

Completed this week

  • Started CYBR-510 and completed early module work in security test engineering.
  • Worked on an assurance-case discussion focused on how security claims need supporting evidence.
  • Completed a threat-informed risk assessment and security test prioritization assignment.
  • Completed module quiz work covering early security test engineering concepts.
  • Continued turning course activity into public-safe summaries for the site.

Projects

Threat-Informed Risk Assessment and Test Prioritization

Focus: Risk Assessment / Security Test Planning

Summary: Worked through how threats, risks, and testing priorities connect when planning security validation work.

What I learned: Security testing is strongest when it is tied to realistic threats and prioritized by risk instead of treated as a generic checklist.

Building the Assurance Case

Focus: Assurance Cases / Evidence-Based Security

Summary: Reviewed how an assurance case connects security claims to evidence, assumptions, and supporting reasoning.

What I learned: A security claim is more useful when it can be traced to specific evidence and tested assumptions.

Module 2 Quiz

Focus: Security Test Engineering Foundations

Summary: Completed quiz work for the current CYBR-510 module.

What I learned: Repeated checks help reinforce the vocabulary and structure behind security testing, requirements, and risk measurement.

Currently learning

  • Security test engineering
  • Threat-informed risk assessment
  • Security test prioritization
  • Assurance cases
  • Risk measurement
  • Security requirements and specifications

Biggest takeaway

The biggest takeaway this week was that effective security testing starts before the test itself. Clear requirements, realistic threat assumptions, and evidence-based reasoning make testing more useful and defensible.

Next focus

  • Finish the risk measurement elevator pitch discussion.
  • Prepare for the security requirements document and simple-application specification.
  • Continue module quiz review and keep translating coursework into portfolio-ready summaries.