CC – Certified in Cybersecurity (ISC)² Complete Master Class

Develop resilience through business continuity planning guided by a business impact analysis. Align recovery strategies with operations, people, facilities, and technology in a living, tested plan.

Build digital resilience by implementing disaster recovery (DR) strategies, understanding the difference between DR and business continuity, and applying the 3-2-1 backup rule with cloud options.

Learn to manage incident response with a four-phase lifecycle: preparation, detection, response, and learning, supported by a cross-functional team and prioritized triage.

Explore how mean time between failures, recovery time objective, and recovery point objective drive service level agreements, uptime targets, and the cost-resilience trade-off.

Learn how authentication acts as a digital gatekeeper, starting with passwords, then adding something you have and something you are, and culminating in multi-factor authentication that layers defenses.

Explore discretionary, mandatory, role-based, and attribute-based access control to see how authorization governs who can access what, when, and where in modern systems.

Explore identity and access management, the digital gatekeeper that uses provisioning, single sign-on, least privilege, and privileged access management to protect key accounts.

Physical access controls form the security foundation, linking perimeter deterrence, building access, and environmental safeguards in a cohesive, layered defense.

Explore how internet data travels in packets guided by protocols like TCP and UDP, per OSI model, through routers, switches, and firewalls, with IPv4 to IPv6 and defense in depth.

Explore how attackers target machines and people, from denial-of-service and network reconnaissance to sniffing and man-in-the-middle attacks. Learn defenses with firewalls, encryption, and user awareness to prevent breaches.

Build a modern digital fortress by layering perimeter firewall, secure VPNs, internal sentinels (IDS/IPS), zero-trust segmentation with VLANs and microsegmentation, and NAC enforcement.

Explore the security operations center, a 24/7 nerve center that monitors networks, hunts threats, and coordinates defense with tiered analysts, a soc manager, and tools like siem and edr.

Improve security monitoring and centralized log management through a centralized evidence room approach, enabling real-time digital investigations using logs as the evidence trail and driving KPIs like MTTD and MTTR.

Analyze the 2013 Target breach, where vendor access enabled a four-stage attack, malware on checkout terminals exfiltrated 40 million cards and 70 million records, and alert response failed.

Examine how a single preventable mistake at Equifax exposed 147 million people, revealing patch failures, no network segmentation, unencrypted data, and expired security certificates.

Celebrate finishing the course and build a cybersecurity career foundation using your toolkit—security principles, access controls, network security, and security operations.