CSX-P® Complete Course | Build Defensive Cyber Skills

Explore real-world application and network architecture, from servers, front end, back end, and database to HTTP requests, web servers, APIs, storage, and security components.

Discover the core server components: central processing unit, memory, and storage types like hard disk drive and solid-state drive, plus how motherboard, network interfaces, and raid influence performance.

Explore server form factors, including rackmount and blade enclosures, home computer cases, and how storage area networks scale alongside processors, memory, and storage.

Explore storage media from hard disk drives to SSDs and USB flash, noting speeds, latency, and interfaces like SATA and M.2, and compare DAS, NAS, and SAN architectures.

Build and maintain an up-to-date asset inventory to identify owners, custodians, location, and classification, then manage the asset lifecycle from acquisition to retirement with risk assessment and data destruction.

Explain authentication, authorization, and accounting (AAA and IAAA), detailing identification, access control lists, and how privilege separation, MFA, PAM, and audit trails secure resources.

Identify risks through brainstorming, risk scenarios, and threat modeling, with clear scope and asset awareness. Assign risk ownership and apply top-down or bottom-up approaches aligned with risk appetite.

Identify assets, threats, and risks through threat modeling, using stride, red, and pasta to evaluate threats and determine countermeasures as an ongoing process.

Create governance by developing policies, standards, and procedures that reflect management intent, define acceptable behavior, and require top-level approval and clear communication.

Security standards establish mandatory, quantifiable requirements that translate policy into measurable controls, specify what to configure, and guide updates and baselines managed by information security.

Explore the hierarchy of laws, acts, regulations, and standards that govern information security and cyber security, and learn key frameworks like Sox, HIPAA, GDPR, ISO/IEC 27001, and NIST.

Identify privacy requirements by distinguishing privacy from security, review GDPR and global data protection laws, and map roles such as data subject, data controller, data processor, and DPO.

Threat intelligence integrates open source, internal, and private data with CERTs and private threat intelligence platforms to identify threats and attacker methods, coordinating alerts, advisories, and incident response across organizations.

Categorize security controls as preventive, detective, corrective, or deterrent, and apply them before, during, or after incidents. Weigh cost against asset value to realize resilience and return on security investment.

Divide the network into isolated segments to enhance security, performance, and manageability through VLANs, ACLs, SDN features, VRF domains, and physical separation. Enforce zero-trust through firewall checks for inter-segment traffic.

Explore firewalls from stateless and stateful to application layer, and learn how DMZs, bastion hosts, and honeypots, plus data diode, enhance network security through segmentation, deception, and visibility.

Learn how intrusion detection systems identify security issues and how intrusion prevention systems block attacks when inline, and how OT and SPAN configurations affect deployment.

Apply content filtering through proxies and firewalls, including forward, reverse, explicit, and transparent deployments, and secure email with SMTP, DKIM, and SPF.

Explore data protection techniques like encryption, obfuscation, steganography, access controls and masking, and data separation to protect cardholder data, secure enclaves, and industry standard protocol while avoiding security through obscurity.

Explore endpoint protection platforms, integrating antivirus, sandbox analysis, host-based intrusion prevention and firewall, and device and web controls to block threats and enforce centralized policy across devices.

Defend end-user devices with endpoint security strategies. Emphasize zero trust to treat endpoints as untrusted and apply patch management, encryption, and robust access controls.

Explore the basics of cryptography, transforming plaintext to ciphertext via encryption. Learn symmetric vs asymmetric algorithms, and block vs stream ciphers, with standards like FIPS 142 and TLS.

Explore the authorization process and how access control models (mandatory, discretionary, role-based, and rule-based) grant subjects permissions over objects, using access control lists.

Explore senior security roles such as CRO, CIO, CISO, and CSO, and how governance, risk management, and separation or convergence structures shape enterprise security.

Develop real life scenario test cases to validate security controls against misconfiguration and technical failures, and use independent audits and SoC reports to demonstrate assurance and compliance.

Develop and operate a full vulnerability management lifecycle, asset inventory, continuous monitoring, risk-based prioritization, patching, configuration changes, and post remediation validation with ongoing reporting.

Penetration testing uses an organized workflow to identify known and unknown vulnerabilities, with white hat testers under rules of engagement to assess scope and provide fixes.

Establish a single repository for device and configuration information, develop a baseline, and document configurations to ensure correct software versions and secure settings through change management and compliance.

Learn how change management evaluates, tests, approves, schedules, and implements changes in IT operations, balancing business value and risk, with standard, normal, emergency, and major change types.

Explore how the security operations center monitors, analyzes, and responds to incidents using network data and SIEM logs, and how level one to three analysts collaborate to contain threats.

Establish accountability with audit trails and logs by capturing who did what to which object and when. Siem solutions enable real-time monitoring, correlation, and analysis for incident response.

Understand siem as a real-time analytics platform that collects logs from firewalls and IDS/IPS, normalizes and correlates data to trigger alerts and support forensic and incident response.

Explore edr, ndr, xdr, and soar, showing how endpoint and network detections combine with automated response to detect indicators of compromise, contain threats, and support incident response.

Learn how incident management prevents and mitigates incidents, builds an incident response plan, assembles a cross-functional team, and establishes detection, communication, and testing procedures.

Ensure a senior-management approved incident response plan aligned with business needs, with a charter, clear contact information, roles, and procedures for identification, containment, eradication, recovery, testing, and lessons learned.

Ensure digital evidence is collected and preserved with a documented chain of custody, using non-intrusive forensics tools. Leverage bit-by-bit cloning to protect data integrity and involve specialists when needed.

Identify critical processes and dependencies through business impact analysis to design disaster recovery plans and a corporate-wide business continuity plan, defining recovery time objectives and prioritized restoration.

Harmonize the disaster recovery and business continuity plan to minimize disruption, ensure continuity of operations, and coordinate incident response, crisis communication, evacuation, and senior management accountability.

Compare mirror, hot, warm, cold, mobile, and cloud-based recovery sites, noting replication and readiness. Explore reciprocal agreements for mutual aid and understand how pay-as-you-go cloud backups enable rapid recovery.

Learn how backups act as corrective controls to prevent data loss from cyber incidents, disasters, or hardware failures, and design secure local backup strategies with testing, retention, and encryption.

Explore how the redundant array of inexpensive disks enables data availability through Raid types 0, 1, 5, 6, and 1-0, balancing performance, capacity, and resilience.

Understand network redundancy at wan level, including dual homing and multihoming for redundancy and traffic distribution, and explore how content delivery networks boost resiliency.