This is quite a hard section - not because it is technical but because critical thinking is a very particular mind set and to be a good security manager, you will have to analyse threat data quite clinically.