Drafting security standards at Calderwood Industries, 60 operating units in 30 countries with 400 policy documents nobody can reconcile: the eight-step drafting staircase from scope, structure and testable statements through mapping, tailoring, ratification and automation to retirement; and one patch clause redrafted from 'remediated in a timely manner using a risk-based approach' into a testable 14-day requirement with named evidence, a tailored rule for OT maintenance windows, exceptions with a named authority and a sunset date, and traceability from law to audit test.

CY-EXPERT-014Expert Level · Policy and Standards

Security Standards Drafting — The Drafting Staircase

An expert-level course in complex scenario design for standard drafting. Climb the drafting staircase - eight steps from a raw requirement to a retired document - writing standards that are testable, traceable, tailorable across a federated enterprise, ratifiable against real dissent, and automatable. Four hands-on activities in every lesson, no shell terminals.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Trace every requirement to a named source and write an explicit, applicable scope for a standard.
Structure a standard with clear hierarchy, defined terms, and testable MUST/SHOULD/MAY language.
Write control statements with a measurable threshold and named evidence, and map them to every obligation and framework they satisfy.
Tailor, except, ratify, and represent a standard machine-readably so it survives OT, legacy, dissent, and automation.

Price:৳12,000