🎓 Student Exercises — Cybersecurity & Privacy
Short, safe, structural prompts for building regime awareness
1. Identify the Primary Regime#
Using the Cybersecurity & Privacy overview and the examples visible on the NIST publication page, answer:
- Which regime (R0, R1, R2, or R3) does this domain primarily operate in?
- What evidence supports your answer?
(Hint: 5G privacy capabilities, DNS deployment guidance, API protection, MFA, OT workcells, and identity‑leakage evaluation are all classic R3 activities.)
nist.gov
2. Upstream Assumptions#
Choose one cybersecurity concept from the publication list (e.g., “SUPI/SUCI protection,” “DNS security deployment,” “API protection,” “digital identity guidelines,” “telehealth smart‑home integration risks”) and identify:
- What coherence assumptions (R2) does this concept rely on?
- What operator assumptions (R0) might be implicit behind it?
Keep answers short — 1–2 sentences per layer.
nist.gov
3. Downstream Behavior#
Pick a specific NIST Cybersecurity & Privacy activity or document (e.g., 5G paging protections, hardware‑enabled integrity, MFA for criminal‑justice systems, ERM integration, election verifiability, smart‑home user‑study analysis) and describe:
- What is being measured, implemented, or verified?
- How does this reflect R3 reasoning?
Use examples from the publication page.
nist.gov
4. Triadic Awareness Check#
In 3–4 sentences, explain how TriadicFrameworks could complement (not replace) NIST’s cybersecurity and privacy work by:
- clarifying upstream assumptions (R0–R2)
- supporting downstream implementation, risk modeling, and measurement (R3)
This is an awareness exercise, not a critique.
5. Optional: Cross‑Domain Thinking#
Pick another NIST domain (e.g., Analytical Chemistry, Bioscience, Fire, Ceramics) and compare:
- How does Cybersecurity & Privacy’s regime alignment differ from that domain?
- What stays the same across both?
This helps students see structural patterns across the entire NIST landscape.