Information Security A-Z: Cyber Security Bootcamp

Define information as data with real-world importance, and explain its role in decision making, baselines, and solving problems, while highlighting how data analysis drives IT service management and IT security.

Explore the CIA triad—confidentiality, integrity, and availability—and understand how these core security properties ensure authorized access, accurate data, and on-demand usability.

Explore the definition of information security management systems, the process approach, the PDCA cycle, risk assessment, internal audits, and the statement of applicability.

Explore the pdca cycle steps for information security management systems, including plan, do, check, and act, covering risk assessment, scope, policies, controls, documentation, communication, audits, and continual improvement.

Identify assets first, then assess vulnerabilities and threats to those assets, evaluate security controls, and apply the PDCA cycle with ISO 27001 to guide risk identification.

Learn to respond to risk through mitigation, transfer, acceptance, or avoidance, applying security controls and ongoing monitoring to keep risk at an acceptable level.

Explore types of agreements in information security, including sales and purchase agreements, service level agreements, MOUs, and interconnection security agreements, and their role in data protection and defining terms.

Define security and explain why cyber security matters in a digital world, highlighting privacy protection, data security, and key types such as network, information, application security, plus disaster recovery.

Explore the five main security attack categories—operating system, misconfiguration, application level, shrink wrap code, and scripting—and how unpatched systems, default passwords, and SQL injection enable breaches.

Learn how security services protect data and systems using confidentiality, integrity, and availability, along with non-repudiation and access control. Explore security mechanisms like cryptography, digital signatures, and security audits.

Explore cryptography by comparing symmetric encryption, which uses a single key to encrypt and decrypt cipher text, with asymmetric encryption using public and private keys.

Diffie-Hellman enables two parties to establish a shared secret key over a public channel using a generator and prime, while private keys remain confidential, allowing subsequent symmetric encryption.

This lecture introduces identity and access management, covering authentication, authorization, and accounting (AAA), authentication factors, access control models and mechanisms, and user and password management.

Design robust APIs by prioritizing consistency, simplicity, flexibility, and security from the start. Use clear endpoint names, proper HTTP verbs, versioning, and thorough documentation.

Learn how qualified security assessors, authorized by the PCI security standards council, validate PCI DSS compliance. Discover how to choose an on-site, guidance-focused QC and verify qualifications.