Separate Assets, Threats and Vulnerabilities
Classify the statement’s role in the threat model before selecting a control.
About 22 minutes, plus any extended practice
Open lesson 1Build a Threat and Recovery Model
Model a private-record endpoint that lacks authorization and a usable backup made at hour 5 before failure at hour 8. Select controls and a data-preserving test.
Before you begin
- Explain permission checks and distinguish saved from unsaved work.
Choose by skill rather than age alone. Read with an adult when useful, revisit a lesson, or explore another grade.
Follow the lesson sequence
Choose a Control for the Stated Risk
Choose the control that directly addresses the supplied weakness.
About 22 minutes, plus any extended practice
Open lesson 2Calculate a Recovery-Point Gap
Subtract last completed backup time from the failure time in matching units.
About 22 minutes, plus any extended practice
Open lesson 3Verify Recovery rather than Assuming a Copy Works
Test a copied synthetic record in an isolated destination and compare its expected content.
About 22 minutes, plus any extended practice
Open lesson 4Review and transfer
After the lessons, try 4 new review cases and a practical task. Each answer has an explanation and a link back to the related lesson.
Open the unit reviewGuest answers are temporary. Keep your own paper or document; this unit does not certify completion or record a school grade.
Topic references
- 2026 CSTA PK–12 Computer Science Standards: topic reference — Systems & Security; Ethics & Social Responsibility
These references informed the topic selection. They do not certify complete standards alignment.