Cybersecurity · Intermediate level

Intermediate level · Module 6: Small Organisation Security Assessment · Lesson 3 of 3

Reporting and Prioritising Improvements

Turn findings into a clear, prioritised plan the organisation can afford.

In this lesson you will

  • Rate and prioritise findings
  • Write a clear assessment report

Key concepts

risk ratingquick winsexecutive summaryimprovement roadmap

The lesson

Rate findings by likelihood and impact so the most important are fixed first.

Lead with quick wins — MFA on email, backups tested, admin rights removed — that are cheap and effective.

The report has an executive summary, findings with evidence, recommendations with owners and a 90-day roadmap. Present it calmly, without blame.

Step by step

  1. Rate each finding.
  2. Identify quick wins.
  3. Write the report.
  4. Present to the organisation.

Practice activity

Complete and present the Small Organisation Security Assessment.

Expected result: A professional report and presentation that meet the project criteria.

Check your understanding

  1. How are findings prioritised?

    Show answer

    By likelihood and impact.

  2. What is a quick win?

    Show answer

    A cheap, fast change that reduces risk significantly.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.