CS Kairos Learn
CS KAIROS · LEARNING LIBRARY

M05 · Vulnerability Analysis · Safe practice

This module uses offline data, self-created inputs or tabletop scenarios. Follow the steps and check the evidence you produce.

Tabletop exercise: a four-column remediation decision

Use only fictional assets A and B; do not scan or modify systems.

  1. Create columns for applicability, exposure, threat evidence and action.
  2. For A, write immediate mitigation and later patch verification. For B, list unresolved checks.
  3. Add a condition that could change the order, such as B becoming public and handling sensitive data.

Expected result

A’s decision is supported by applicability, exposure and threat evidence. B’s unknowns remain explicit rather than being treated as safety.

Check your work

Can you distinguish temporary exposure reduction from a verified completed fix?

Finish and clean up

Keep the decision table. The tabletop exercise requires no system cleanup.