Cyber Security A-Z™: Masterclass Course for Non-Techies

Explore cyber security as the application of technologies to defend computer systems and data from malicious attacks, and its distinction from the broader information security field.

Explore the CISO as the apex leader who develops information security policies, excels in communication, and steers cloud identity, access management, and overall security for the organization.

Explore the six major elements of information security—confidentiality, integrity, availability, non-repudiation, authentication, and access control—and how they safeguard data in this cyber security masterclass.

Learn how integrity ensures information remains unmodified, complete, and authentic from authorized sources, using encryption, decryption, and hashing to keep data accurate across communications.

Learn how authentication verifies your identity and enables access control through single-factor, two-factor, and multi-factor methods.

Explore the fundamentals of cryptography, from why we need it to how it protects data, covering ciphers, symmetric encryption, RSA, Diffie-Hellman, hashing, public key infrastructure, digital signatures, SSL/TLS, and cryptanalysis.

Explore the fundamentals of cryptography, its historical roots from Caesar ciphers to modern encryption, and its role in confidentiality, integrity, availability, authenticity, and its two common types.

Explore symmetric and asymmetric encryption, how a single key locks and unlocks data versus two keys, and how public and private keys create cipher text in cryptography.

Symmetric encryption uses the same key to encrypt and decrypt, a fast two-way private key method, with examples like Blowfish, Twofish, AES, DES, and Diffie-Hellman for secure key sharing.

Diffie-Hellman key exchange lets two parties derive a shared secret key over an insecure channel using public generator and prime numbers with private keys, for symmetric encryption.

Explore hashing as a cryptographic function that converts input data into a fixed-length message digest, using MD5 and SHA-1/2/3 to verify data integrity and support digital signatures.

Demonstrates how digital signatures verify document integrity and sender authenticity using sha-256 hashing, private key signing, and public key verification in a practical Bob and Alice example.

a certificate authority issues digital certificates to verify identity within a hierarchy of authorities, uses public keys while private keys stay secret, enabling trusted document signing and certificate validation.

Introduce information security risk management with industry practices, covering risk, threat actors, the risk formula, and the PDCA cycle. Outline the risk assessment process, NIST framework, and managing people risks.

Identify organizational assets, assess vulnerabilities and threats, and evaluate security controls within the risk assessment framework guided by ISO 27001 and the pdca cycle.

Identify and analyze risks to gather data on consequences and likelihoods. Determine risk levels and plan mitigations; this overview introduces risk assessment and risk management frameworks.

Master the NIST risk management framework with its six steps—categorize, select, implement, assess, authorize, and monitor—by applying a continuous, risk-based approach to federal information systems.

Explore quantitative risk assessment and how to express risk in monetary terms using asset value data, exposure factor, likelihood, and impact to decide between mitigation options like replacement or repair.

Explore personnel risks in cyber security, from background checks and non-disclosure agreements to onboarding, training, policies, mandatory vacations, job rotation, and separation of duties.