What Is Wrong With This Process?

About this interactive

What you are doing: naming what is wrong with each process. The lesson describes a spectrum. At one end there is no process: nothing written down, so everyone does it their own way and there is no consistency. At the other end a process is too complex: so time-consuming or such a hindrance that people do not want to do it, and they go around it. Most organizations sit in between with underdeveloped processes: something is in place, but it is not well defined. It leaves out who, how, when or what. And a process can be outdated: it was right when it was written, but the organization changed and the process did not. The goal is a process that is well defined, documented, kept up to date and the right one for the job. The lesson's staffing and organizational changes are when these weaknesses show most. How to use it: ask whether there is a process, whether it says enough, whether people can follow it, and whether it still matches how things are done.

What you'll learn

Name the process vulnerability in a situation: no process at all, an underdeveloped process that exists but is not well defined, a process too complex for people to follow, or an outdated process that no longer fits

Aligned to

CompTIA Security+

5.1 Summarize elements of effective security governance.

1.3 Explain the importance of change management processes and the impact to security.

Key terms

Security Policy: A formal document that defines an organization's security goals, rules, and responsibilities.
Change Management: A structured process for requesting, reviewing, approving, and documenting changes to IT systems or organizational procedures. Change management reduces security risk by ensuring modifications are tested and authorized before deployment.
Procedure: A detailed, step-by-step set of instructions for carrying out a specific task in alignment with policies and standards.
Staffing Transition: A change in personnel — such as hiring, termination, or role reassignment — that can introduce security vulnerabilities if access rights and procedures are not properly updated.

Topics

Security Policy Change Management Procedure Staffing Transition Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →