Analysis
Cases and analysis
Case-based readings that examine concrete situations, their risks and their technical and legal consequences. These are not introductory textbook chapters.
Readings
Start with a practical question
Each reading explores one question or scenario. For the foundational concepts, consult the Knowledge chapters.
Risk Is Not a Vulnerability
Why a technical weakness and a business risk are not the same.
Public Wi-Fi: What Is the Actual Risk?
Separating myths, current threats and reasonable precautions while travelling.
An Urgent Message Does Not Prove Who Sent It
Deception may begin on a genuine channel and end in a rushed decision.
Multifactor Authentication: Scope and Limits
MFA reduces risk but does not eliminate stolen sessions, weak recovery or deception.
A Familiar Account Making an Unexpected Request
Distinguishing apparent identity, control of an account and authorization for a request.
Account Recovery May Be the Weakest Link
The security of access also depends on how it is restored when something goes wrong.
Hash, Screenshot and Context
What each item can establish, and what questions remain unresolved.
Cloud Evidence: Preserving Data Without a Physical Drive
How evidence changes when it depends on logs, APIs and providers.
A Conversation Screenshot Is Not the Whole Conversation
Context, integrity and provenance before assessing digital messages.
Digital Medical Records: Data Extend Beyond the Screen
Access, logs, providers, copies and responsibilities surrounding sensitive information.
Online Reputation and Search Results: Identify the Problem First
Not every unwanted search result calls for the same solution: source, search engine and platform are different layers.
My Personal Information Has Been Published: What Should I Check First?
An accidental exposure calls for a different response from legitimate publication or fraud.
Zero Trust: Architectural Principles and Limits
What it means in practice to reduce implicit trust.
A Private File That Becomes Public in the Cloud
Resource settings and divided responsibilities matter more than the cloud label.
A Vulnerable Dependency Does Not, by Itself, Determine the Risk
Moving from a security advisory to a decision that considers exposure, context and consequences.
Shadow AI: When Tools Arrive Before Governance
What happens when teams use AI without inventories, data rules or controls.
AI Governance: Risks, Controls and Accountability
Inventory, use case, data, risk, controls and human oversight.
Artificial Intelligence in Healthcare: Decisions, Data and Responsibilities
Automated recommendations can influence care even when a professional makes the final decision; that influence creates technical, clinical and legal questions.
Ransomware: Why Backups Are Not Recovery
Copying data is only one part of returning to operations.
When a Supplier Goes Down, Your Service Stops
Continuity depends on relationships that may be absent from an organizational chart.
Restoring Too Quickly Can Reintroduce the Incident
Post-incident recovery requires deciding which system state can be trusted.
A Digital Procedure Is More Than a Website
Digital forms do not guarantee an understandable or traceable procedure.
A Digital Notification Does Not Guarantee Awareness
Technical delivery, actual access and legal effects are distinct questions.
Signing with One Click Does Not Prove What Was Accepted
Identifying the signer, preserving the document and proving consent are separate issues.
No hay lecturas con esos criterios. Prueba otra palabra o selecciona Todos.