The Problem
A higher-education cybersecurity assessment produced interviews, field observations, photos, network and wireless test results, directory and policy exports, external penetration-test evidence, and other raw information. The IT organization needed that evidence turned into an actionable remediation and planning tool.
Why It Was Hard
The evidence came from different methods and levels of certainty. Findings needed to remain traceable to supportable observations, explain practical impact, and distinguish urgent remediation from longer-term improvement. The report also had to work for technical staff and for planning and resource discussions.
What I Figured Out
Evidence needed traceability before it could become a defensible remediation plan. Each finding had to connect raw evidence to risk, practical consequence, priority, and a feasible next action.
What I Changed
I participated in the onsite assessment, managed evidence, identified risks through interviews and physical inspection, and built a report that connected each finding to its evidence, impact, and remediation. The package included an executive summary, prioritized recommendations, supporting evidence, and training guidance.
I also created comparison notes, quick-reference material, and safety guidance for defensive tools tied to the organization’s actual findings. The tools supported follow-up testing; they were not the accomplishment themselves.
What Changed as a Result
The report and supporting material were delivered and accepted. The IT team gained a documented basis for remediation, training, planning, resource and budget discussions, and follow-up defensive testing.