Cyber CareerPlaybookTHREE DIRECTIONS / ONE EVIDENCE HABIT
Start with a task, then examine the role. Each field guide has a different fictional exercise, a concrete output and a reading path you can follow without an account.
Governance, risk and compliance work asks you to make obligations, uncertainty and follow-up understandable. Practice describing a risk, showing its support and identifying who can act.
A risk statement with evidence, an accountable owner and a next decision.
IT audit preparation starts with a question you can examine and a record another person can follow. Practice explaining what you looked at, what you found and where your conclusion stops.
A workpaper showing the objective, procedure, evidence and limits of a conclusion.
A vendor questionnaire becomes useful when you know what the supplier will do, what information it will receive and which unresolved conditions matter. Practice turning a broad request into a focused review.
A supplier review memo with service scope, evidence limits and a decision request.
A posting may combine policy work, control assessment and supplier coordination. These guides organize preparation; they do not divide every employer into three fixed job types.
Underline the tasks, name the expected outputs and identify the decisions the role owns. Then select the guide that addresses your largest gap. You can return to the others when the work calls for them.
Read the detailed role comparisonWork through a job-description example