Basic Cyber Security Course

Lesson 1 • Threat Actors and Motivations

Profiles nation-states, cybercriminals, insiders, and hacktivists. Understanding actor motivation guides appropriate control selection throughout the course.

Lesson 2 • Types of Cyber Threats

Surveys malware, phishing, denial-of-service, and supply-chain attacks. Provides the threat taxonomy learners reference in all later chapters.

Lesson 3 • Core Security Principles

Covers the CIA triad, non-repudiation, and least privilege. These principles underpin every technical and policy decision in the course.

Lesson 4 • Cybersecurity Roles and Frameworks

Maps industry roles and introduces widely adopted security frameworks. Learners understand how frameworks structure organisational security programmes.

Lesson 1 • IP Addressing and Subnetting

Covers IPv4, IPv6, CIDR notation, and subnet design. Accurate addressing knowledge is required for firewall rule creation and network segmentation.

Lesson 2 • Network Devices and Segmentation

Examines routers, switches, firewalls, and DMZ architecture. Segmentation concepts directly support the network defence techniques in later chapters.

Lesson 3 • Network Models and Protocols

Explains OSI and TCP/IP models and maps common protocols to each layer. This context is essential for diagnosing where attacks occur.

Lesson 4 • Wireless Network Security Basics

Covers Wi-Fi standards, encryption protocols, and common wireless attacks. Wireless vulnerabilities are a frequent entry point addressed in later chapters.

Lesson 1 • Linux Hardening Techniques

Covers file permissions, SSH hardening, and service minimisation on Linux. Learners apply controls consistent with industry hardening benchmarks.

Lesson 2 • OS Architecture and Attack Surface

Maps kernel, user space, and system services to potential attack vectors. Understanding the architecture guides targeted hardening decisions.

Lesson 3 • Windows Hardening Techniques

Applies security baselines, registry controls, and Group Policy to Windows systems. These controls directly reduce exploitable misconfigurations.

Lesson 4 • Patch Management and Vulnerability Remediation

Establishes patch cycles, vulnerability scanning, and remediation prioritisation. Timely patching closes the vulnerabilities exploited in later attack chapters.

Lesson 1 • Public Key Infrastructure

Covers certificate authorities, digital certificates, and trust chains. PKI underpins secure web, email, and VPN communications discussed later.

Lesson 2 • Key Management Best Practices

Addresses key generation, rotation, storage, and destruction. Poor key management is the most common cause of cryptographic control failure.

Lesson 3 • Transport Layer Security

Explains TLS handshake, cipher suites, and common misconfigurations. Secure transport is mandatory for protecting data in transit across all services.

Lesson 4 • Data-at-Rest Encryption

Covers full-disk, file-level, and database encryption strategies. Learners match encryption scope to data sensitivity and operational requirements.

Lesson 1 • Authentication Methods and Factors

Compares passwords, tokens, biometrics, and certificate-based authentication. Selecting the right factor combination is central to access control design.

Lesson 2 • Authorisation Models

Explains RBAC, ABAC, and MAC models with practical implementation guidance. Authorisation models determine what authenticated users are permitted to do.

Lesson 3 • Single Sign-On and Federation

Covers SSO protocols, identity federation, and trust relationships between domains. Federation reduces credential sprawl while maintaining centralised control.

Lesson 4 • Identity Governance and Lifecycle

Covers provisioning, access reviews, and deprovisioning workflows. Governance ensures access rights remain aligned with current job responsibilities.

Lesson 1 • Security Monitoring and SIEM

Introduces log aggregation, correlation rules, and alert triage in a SIEM. Continuous monitoring converts raw log data into actionable security intelligence.

Lesson 2 • Network Access Control

Addresses endpoint posture assessment, 802.1X, and quarantine networks. NAC ensures only compliant devices gain access to sensitive network segments.

Lesson 3 • Intrusion Detection and Prevention

Explains signature, anomaly, and behavioural detection methods for IDS/IPS. These systems provide visibility into attacks that bypass perimeter controls.

Lesson 4 • Firewall Configuration and Rule Design

Covers stateful inspection, rule ordering, and zone-based policies. Correct firewall rules are the primary barrier against unauthorised network access.

Lesson 1 • Digital Forensics Basics

Introduces evidence acquisition, chain of custody, and forensic analysis tools. Forensic integrity ensures findings are admissible and defensible.

Lesson 2 • Incident Communication and Reporting

Addresses stakeholder notification, regulatory disclosure timelines, and incident reports. Clear communication limits organisational damage during active incidents.

Lesson 3 • Incident Response Lifecycle

Maps preparation, detection, containment, eradication, recovery, and lessons learned. The lifecycle provides the procedural backbone for all response activities.

Lesson 4 • Malware Analysis Introduction

Covers static and dynamic analysis techniques in isolated environments. Understanding malware behaviour accelerates containment and eradication decisions.

Lesson 1 • Security Policy Development

Guides creation of acceptable use, data classification, and incident response policies. Policies formalise security expectations and establish accountability.

Lesson 2 • Risk Assessment Methodology

Covers qualitative and quantitative risk analysis, asset valuation, and risk registers. Risk assessment outputs drive control selection and budget prioritisation.

Lesson 3 • Compliance and Regulatory Alignment

Maps security controls to data protection, payment security, and healthcare privacy requirements. Compliance alignment reduces legal and financial exposure.

Lesson 4 • Third-Party and Supply-Chain Risk

Covers vendor assessment, contractual security requirements, and ongoing monitoring. Third-party risk is a leading source of organisational breaches.