Method note / 01

Current web beta

Practice judgement, then inspect the reasoning.

SecFlow uses short scenarios to connect security knowledge with ownership, trade-offs and management action.

Unit of practice
One contextual management decision
Feedback
Stored explanation supplied with each lesson
Reinforcement
Reflection, saved items, missed-item review and readiness views

Sequence

Six stages keep the session focused.

  1. 01

    Brief

    Establish the business objective, constraints, stakeholders and risk context.

  2. 02

    Decide

    Select the action that best reflects accountable management judgement.

  3. 03

    Explain

    Compare the choice with the coaching stored in the lesson.

  4. 04

    Reflect

    Name the principle, trade-off or assumption that shaped the decision.

  5. 05

    Review

    Return to saved or missed material instead of treating completion as mastery.

  6. 06

    Progress

    Use domain and readiness views to choose the next area of practice.

Framework use

Frameworks provide context, not borrowed authority.

Scenario topics may be organised around recognised security-management domains and governance concepts. SecFlow remains independent of certification bodies.

Current purpose

Help learners practise alignment, risk treatment, program decisions, incident governance and related leadership reasoning in context.

Boundary

SecFlow does not reproduce an official examination, guarantee an outcome or replace current official publications and professional advice.

Quality status

Trust includes stating what is still being strengthened.

Verifiable today
Lessons use structured scenario, answer and coaching fields. The current web app presents stored coaching and does not call an external generative-AI service for scenario feedback.
Still being formalised
Per-item provenance, named reviewer records and a public review cadence are not yet available across the full catalog. SecFlow does not rely on those as current claims.