Explore security fundamentals through the CIA triad—confidentiality, integrity, and availability—with practical methods like encryption, access control, authentication, non-repudiation, and backups.

Adopt a never trust, always verify zero trust mindset, using policy enforcement points, data and control planes, and adaptive identity to enable conditional, policy-driven access.

Explore how change management affects business processes and security operations, detailing stakeholders, ownership, impact analysis, approval processes, maintenance windows, and back-out planning.

Explore a high-level view of encryption, including symmetric and asymmetric ciphers, block and stream modes, encryption levels from file to database, and secure transport through TLS.

Explore symmetric encryption, a single-key method that encrypts and decrypts data, and compare block and stream ciphers with examples like AES, Twofish, ChaCha20, Salsa, and RC4 (deprecated).

Explore threat actors from script kiddies to nation-state hackers, detailing motivations such as financial gain, espionage, and political aims, with examples like APTs, insider threats, hacktivists, and ransomware gangs.

Explore how business email compromise uses social engineering and lookalike domains to impersonate vendors, CEOs, or lawyers, targeting finance, HR, and executives, with defenses like MFA and DMARC.

Explore digital system threats through app vulnerabilities, client-based and agentless risks, web application flaws and network services, and practical defense ideas, including OWASP top 10 and mitigation strategies.

Explore wired and wireless threats, from physical access and VLAN hopping to ARP poisoning, rogue devices, and Bluetooth attacks, emphasizing encryption and secure configurations.

Identify indicators of password attacks, including brute-force, dictionary, and mutation techniques, and detect them by monitoring Linux auth.log and Windows security event IDs.

Explore virtualization concepts and security for virtual machines and containers, including Kubernetes, container orchestration, and security groups and network ACLs in cloud environments.

Explore high availability concepts and site considerations, including load balancing versus clustering, horizontal scaling, hot, warm, and cold sites, and metrics like RTO, RPO, and five nines.

Compare single-vendor versus multi-vendor IT strategies, with Cisco, Palo Alto, Dell, Aruba, and Splunk across network, security, and monitoring, plus multi-cloud choices AWS, Azure, and Google Cloud.

Explore identity and access management as a centralized lifecycle that authenticates identities, validates credentials, and authorizes access to resources across directory and cloud environments.

Explore firewalls and intrusion detection devices, compare IDS and IPS, and learn how ACLs, implicit deny, and rule processing strengthen enterprise security, including DMZs and screen subnets.

Explore the NIST-based incident response process, covering preparation, detection, analysis, containment, eradication, recovery, and post-event lessons learned to continuously improve security.

Explore endpoint detection and response (edr) and its evolution to extended detection and response (xdr), covering endpoints, telemetry, detection, investigation, automated responses, and threat hunting.

Discover how standards and procedures shape organizational security, covering password management, multi-factor authentication, access control, encryption, change management, onboarding, and playbooks.

Perform risk identification and assessment by analyzing threats, vulnerabilities, and assets, then evaluate impact and likelihood to produce prioritized risk scenarios and ongoing mitigation and monitoring.

Apply the risk management framework, transferring risk, accepting risk, avoiding risk, and mitigating risk, using cloud examples like AWS and external contractors to balance risk and reward.

Explore vendor assessment and selection with a security lens, covering penetration testing rules, auditing versus testing, independent assessments, supply chain, and building a due-diligence committee to reduce conflicts of interest.

Explore how governance shapes internal and external compliance in security program management, covering policies, training, and metrics to protect customer data and avoid fines, sanctions, and reputational damage.

Attestation is a formal, documentation-driven process that proves to third parties that security controls are effective, with independent auditors gathering evidence, defining scope, and performing a gap analysis.

Explore internal and external audits, audit committees, governance, and self-assessments to improve compliance, train employees against phishing, and reduce bias with independent assessments.

Learn to recognize phishing, including spear phishing and smishing, by training end users to inspect sender name and domain, greetings, urgent language, report threats, and participate in anti-phishing campaigns.