Cybersecurity Fundamentals with Certificate of Completion

In this course, we’re going to explore the core principles of information security and give you a solid foundation for protecting data and systems. We’ll start with the CIA Triad—Confidentiality, Integrity, and Availability.

You'll also learn about privacy as a fundamental right, along with the impact of major global privacy laws like the GDPR that shape how personal data is handled and more.

By the end of this session, you’ll walk away with a strong understanding of information security essentials. This isn’t just important knowledge for your career; it’s also valuable for making informed decisions in today’s digital world. So, if you’re ready to take a confident first step into information security, let’s get started!

Understanding CIA Triad—one of the most crucial concepts in information security. The CIA Triad stands for Confidentiality, Integrity, and Availability and serves as the backbone of cybersecurity, helping to ensure that sensitive information stays protected, accurate, and accessible.

In this video, you’ll learn:

• Confidentiality – How to protect data from unauthorized access using tools like encryption, passwords, and access controls.

• Integrity – Ways to maintain the accuracy and reliability of data through checksums, hashing, and regular backups.

• Availability – Ensuring data and systems are accessible to authorized users when needed, through operational systems, backups, and redundancies.

Understanding the CIA Triad is essential for anyone working with data, from individuals to organizations. It lays the groundwork for more advanced topics like authentication methods, multi-factor authentication, and privacy regulations.

Now, we dive into the fundamentals of risk management in cybersecurity—covering how to identify, assess, prioritize, and address potential risks to safeguard your data, systems, and organization. Starting with core terminology, we’ll help you understand assets, vulnerabilities, and threats, and why their intersection creates risk. You’ll also learn key processes in identifying risks, assessing their impact, and choosing the best treatment strategies, from risk mitigation to acceptance.

Security controls help organizations manage and mitigate risks. This includes physical, technical, and administrative measures designed to protect the confidentiality, integrity, and availability of information systems. Examples of physical controls include badge readers, surveillance cameras, and restricted locked server rooms. Technical controls encompass firewalls, encryption, and multi-factor authentication. Administrative controls are policies, training programs, and security audits that guide employee behavior and align organizational activities with security standards.

Additionally, we discuss the impact of regulations and standards like HIPAA and GDPR on security practices, as well as frameworks such as ISO and NIST, which guide consistent security practices. By understanding these controls, viewers can better appreciate how structured policies, reliable procedures, and ongoing training contribute to a more secure digital environment, reducing risks for businesses and users alike.

We will now deep dive into the terminology and core processes necessary for effectively handling security incidents. Learn about critical terms like breaches, intrusions, threats, and vulnerabilities, building a foundational understanding of how to identify and respond to potential security incidents.

We will also cover the stages of an incident response plan, including preparation, detection, analysis, containment, and post-incident review—key steps that help organizations minimize damage and recover swiftly from attacks. In addition, we look at the elements of business continuity planning, which ensures that essential operations can continue even in the face of significant disruptions.

In this video, we discuss the essential terminologies and response used in cybersecurity to handle security incidents effectively. Understanding key terms like breaches, events, exploits, incidents, intrusions, and threats provides a foundation for security professionals acting as first responders to various cyber threats.

We explore the Incident Response Plan, breaking down its critical components. Starting with preparation, organizations define roles, train staff, and develop policies for incident handling. The detection and analysis phase involves monitoring, gathering intelligence, and documenting incidents accurately to prioritize response. Containment focuses on isolating threats and preventing further damage, while post-incident activities allow organizations to learn from each event by reviewing the process and refining response strategies for the future.

Understanding the essential components of a Business Continuity Plan (BCP) outlines procedures to sustain critical functions and communication pathways, ensuring resilience through well-prepared responses.

The video covers key elements, including communication strategies, immediate response procedures, and call trees to mobilize personnel efficiently. We also discuss the importance of management involvement and supply chain contact lists to support swift decision-making and resource coordination.

Watch to learn how a well-developed plan can keep organizations operating smoothly, even in the face of unexpected challenges.

We now explore the key elements needed to restore an organization’s critical systems and functions after a major incident. Effective disaster recovery plans involve identifying essential systems, creating backups, and ensuring that backups are regularly tested.

The video highlights the importance of maintaining various types of plan documents tailored for different audiences, such as executive summaries for high-level overviews and technical guides for IT personnel responsible for system recovery. We also discuss the role of checklists for key team members, helping them stay organized and efficient during the chaotic recovery period.

In this Access Control Concepts Overview video, we dive into fundamental security controls that uphold the Confidentiality, Integrity, and Availability (CIA) triad of data. This video explains access control mechanisms that limit access to objects, like files and databases, to authorized subjects, such as users or processes, using methods like firewalls and secure locks.

Key topics include Defense in Depth (a layered security approach) and the Principle of Least Privilege, ensuring users have only the minimum access necessary. We also discuss Segregation of Duties to divide tasks and prevent fraud.

The video further explores physical security controls to prevent unauthorized access and logical access controls to secure systems. Finally, we cover Role-Based Access Control (RBAC), which grants access based on user roles to enhance security and streamline management.

Watch to understand how these strategies can help your organization protect assets and support secure, compliant operations.

We dive deep into the essential principles of access control, focusing on defining Security Controls, Subjects, Objects, and Rules. Understand how these elements work together to safeguard sensitive information, ensuring confidentiality, integrity, and availability – known as the CIA Triad. Understanding these foundational elements is vital for anyone involved in cybersecurity, IT management, or data protection, as it highlights how to implement effective security strategies.

Control Assessments and Defense in Depth are two essential tools for strengthening your organization’s security. Control assessments help ensure your security measures are not only effective but fit for the environment and budget. Then, we dive into Defense in Depth—a layered approach that combines people, technology, and processes to make breaching your defenses much harder. Whether you're in IT, cybersecurity, or risk management, these insights are key to building a resilient, adaptable security framework. Watch to learn how these strategies strengthen your protection against evolving threats!

The Principle of Least Privilege is all about granting users and programs only the minimum access they need to do their jobs, reducing unnecessary access that could lead to security risks.

We’ll also dive into Privileged Accounts—accounts with elevated permissions often used by system admins and IT staff for specific tasks like server management or security analysis. These accounts require extra security measures, such as multi-factor authentication and detailed logging, to prevent misuse.

This video is essential for anyone managing security in their organization. It offers practical insights into minimizing access vulnerabilities and securing critical accounts, giving you the tools to build a safer, more resilient IT environment.

Segregation of Duties (SoD), a critical security measure to reduce risks by dividing responsibilities. Segregation of Duties ensures that no single person can control an entire high-risk transaction. This approach is key to preventing fraud, errors, and misuse of authority.

Two-Person Integrity is a security practice requiring at least two individuals to access high-security areas or perform critical actions. It works through a series of check and add extra layer of oversight. Understanding this will help you build robust checks to protect sensitive areas and reduce unauthorized access in your organization.

In this video, we explore the fundamentals of Physical Security and the various types of Physical Access Controls that protect an organization’s people and assets. Physical security involves tangible controls.

We break down different types of access control mechanisms, from perimeter defenses like gates and guard dogs to internal controls like locked server rooms and biometric scanners. You’ll also learn about monitoring tools, such as motion detectors and surveillance cameras, which alert security teams to potential threats. These physical controls are layered to create multiple defenses, protecting both external perimeters and sensitive internal spaces.

This video is a must-watch for those in facility management, IT, or security roles.

Logical Access Controls and Role-Based Access Control (RBAC) are two powerful methods for managing access to digital resources. Unlike physical controls, which are tangible, logical access controls use electronic methods—like passwords, biometrics, and badge readers—to restrict system access, even if someone has physical entry.

Role-Based Access Control takes access management a step further by assigning permissions based on user roles within an organization.

With RBAC, permissions are tied to roles instead of individuals, making it easy to manage access for various levels, like admin, manager, employee, or guest.

This video will cover core networking concepts, design, and security measures. Networking connects computers to share data and resources, requiring a solid grasp of both hardware and encryption technologies. We explore key models, such as the OSI model with its seven layers, and protocols like TCP/IP, which form the backbone of reliable, scalable communication.

Network security is a priority, addressing threats like DDoS attacks, spoofing, and phishing. You’ll learn about important defenses—keeping systems updated, using intrusion detection systems, firewalls, and anti-malware—to safeguard against vulnerabilities. We also touch on network design strategies like segmentation, DMZs, VLANs, VPNs, and defense in depth, all of which are critical for robust security.

This video is perfect for IT professionals and network administrators. By understanding these foundational concepts, you’ll be better equipped to design, implement, and secure networks, ensuring efficient, protected data communication across your organization.

Here, we will break down the basics of Networking, exploring how computers are connected to share data and resources. Networking involves linking devices locally or over wide areas to facilitate communication and access to shared resources, like files and printers. This video covers essential concepts, from hardware components to the protocols that allow reliable data transfer.

We’ll also discuss networking models, like the OSI model, which organizes network functions into seven layers to ensure smooth data flow. Understanding protocols like TCP/IP, which handle key communication tasks, is essential for building and maintaining stable, scalable networks.

In this video, we're diving into the different types of threats that organizations face in the digital world. From spoofing and phishing to more complex threats like denial-of-service (DoS) attacks, viruses, and worms, we’ll explore each one to understand how they operate and the risks they pose.

You'll learn how cybercriminals use tactics like identity falsification and social engineering to trick users and gain unauthorized access. We also examine threats that target network resources, aiming to disrupt systems, and look at the unique dangers of malicious software that can spread independently, like worms.

Learn critical components of on-premises data centers and what it takes to keep them operational and secure. We explore why effective physical security is necessary to protect the data center from potential threats, and how HVAC and fire suppression systems maintain the environment for optimal equipment functionality. Understanding the role of backup power and redundancy will help you see how companies safeguard against outages to ensure continuous operations.

This video will give you insight into the complexities behind a reliable data center, helping you appreciate the meticulous planning and management needed to keep vital information systems running.

We will now discuss the basics of Cloud Computing, explaining how it provides on-demand access to computing resources over the internet. Cloud computing offers flexible, scalable services—similar to a power grid—where you only pay for what you use. This lesson covers the benefits of cloud computing, from reduced hardware costs and lower energy consumption to the ability to scale quickly.

We also dive into different service models: Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS). Each model provides varying levels of responsibility, from full applications to essential infrastructure, depending on your needs. With SaaS, for instance, users can access applications like email or office tools over the internet, while IaaS provides fundamental resources like storage and networking.

We will now focus on how data is managed from creation to destruction while ensuring its confidentiality and integrity. This includes steps like classifying data by sensitivity, labeling it for better management, and implementing retention policies for how long data is kept and how it’s securely destroyed.

You’ll learn about methods for secure data destruction, such as clearing, purging, and physical destruction, and how logging and monitoring systems enhance accountability by tracking events. We also dive into the importance of encryption, configuration management, and change management to protect data and maintain secure system updates. Additionally, we explore security awareness training, which educates users on risks through fire safety and anti-phishing initiatives.

In this video, we’re exploring Data Handling and the stages of data management, from creation to destruction. Data goes through a lifecycle where it’s created, stored, used, shared, archived, and eventually destroyed. Understanding these stages helps organizations ensure that data is handled securely and efficiently.

We’ll discuss best practices for data classification, labeling, retention, and destruction based on sensitivity and value. For instance, high-sensitivity data may require strict classification and secure destruction methods, such as clearing, purging, or even physical destruction, to prevent unauthorized recovery. Effective labeling and retention policies also ensure that data is kept only as long as it’s beneficial, reducing storage costs and ensuring compliance.

Logging and Monitoring Security Events are essential for maintaining accountability and tracking activities across systems. Logging records system events like user actions, access attempts, and key changes, providing a detailed audit trail that helps identify inefficiencies, potential breaches, and vulnerabilities.

We also discuss best practices, including capturing relevant events, maintaining reliable logging systems, and conducting regular log reviews. Monitoring tools, such as firewalls, intrusion detection systems (IDS/IPS), and data loss prevention (DLP) tools, help track inbound and outbound threats, ensuring comprehensive network protection. These systems can detect unauthorized access attempts or data transfers, allowing proactive responses to security events.

Security awareness training includes three key learning activities: education, training, and awareness. Education builds understanding, linking concepts to real-world situations; training develops proficiency in specific actions; and awareness keeps employees alert to potential risks.

We’ll go through examples, like fire safety and anti-phishing campaigns. Fire safety training involves educating employees about fire alarms and system interactions, providing task-specific instructions, and using reminders to keep procedures fresh. For anti-phishing, education helps employees understand social engineering, training enhances their ability to spot phishing attempts, and awareness reinforces vigilance with updates on new phishing tactics.

This video aims to reduce security risks through informed and prepared employees. By implementing these training activities, you’ll strengthen your team’s ability to detect, respond to, and prevent potential security threats.