Module 1: Basic Security Concepts

• 1.1 The CIA triad: Learn about confidentiality, availability, and integrity. Also authenticity, nonrepudiation, and privacy.
• 1.2 Common cyber security threats: Learn about the common cyber security threats facing individuals and organizations.
• 1.3 Understanding risk management: Learn about assessing and understanding risk – impact/likelihood and implementing controls.
• 1.4 Security practices and documentation: Learn about the difference between policies, procedures, standards, and regulations/laws.
• 1.5 The shared responsibility model: What is the shared responsibility model and how does it affect cyber security?
• 1.6 Zero trust: Learn about what is zero trust and how does it affect architecture? What is defense in depth?

Module 2: Identity & Access Management Fundamentals

• 2.1 IAM key concepts: Learn about the principle of least privilege, segregation of duties, how IAM supports zero trust.
• 2.2 IAM zero trust architecture: Learn about how identity is the new perimeter for modern IT environments and the threats it mitigates.
• 2.3 IAM capabilities: Learn about IAM capabilities and controls to secure identities.

Module 3: Network Security Fundamentals

• 3.1 Networking key concepts: Learn about networking concepts (IP addressing, port numbers, encryption, etc.)
• 3.2 Networking zero trust architecture: Learn about how networking contributes to an E2E ZT architecture and the threats it mitigates.
• 3.3 Network security capabilities: Learn about network security tooling – firewalls, WAF, DDoS protection, etc.

Module 4: Security Operations Fundamentals

• 4.1 SecOps key concepts: Learn about why security operations are important and how it differs from normal IT ops teams.
• 4.2 SecOps zero trust architecture: Learn about how SecOps contributes to an E2E ZT architecture and the threats it mitigates.
• 4.3 SecOps capabilities: Learn about SecOps tooling – SIEM, XDR, etc.

Module 5: Application Security Fundamentals

• 5.1 AppSec key concepts: Learn about AppSec concepts such as secure by design, input validation, etc.
• 5.2 AppSec capabilities: Learn about AppSec tooling: pipeline security tools, code scanning, secret scanning, etc.

Module 6: Infrastructure Security Fundamentals

• 6.1 Infrastructure security key concepts: Learn about hardening systems, patching, security hygiene, container security.
• 6.2 Infrastructure security capabilities: Learn about tooling that can assist with infrastructure security e.g. CSPM, container security, etc.

Module 7: Data Security Fundamentals

• 7.1 Data security key concepts: Learn about data classification and retention and why this is important to an organization.
• 7.2 Data security capabilities: Learn about data security tooling – DLP, inside risk management, data governance, etc.

Module 8: AI Security Fundamentals

• 8.1 AI security key concepts: Learn about the differences and similarities between traditional security and AI security.
• 8.2 AI security capabilities: Learn about AI security tooling and the controls that can be used to secure AI.
• 8.3 Responsible AI: Learn about what responsible AI is and AI-specific harms that security professionals need to be aware of.