Cisco cybersecurity course

Lesson 1 • Security Frameworks and Compliance

Introduces industry frameworks and regulatory compliance concepts used to structure security programmes. Connects governance requirements to technical controls.

Lesson 2 • Networking Fundamentals for Security

Reviews TCP/IP, OSI model layers, and common protocols relevant to security analysis. Provides the network literacy needed for traffic inspection and defence.

Lesson 3 • Understanding the Threat Landscape

Surveys modern threat actors, motivations, and attack categories. Contextualises why organisations invest in layered security controls.

Lesson 4 • Core Security Concepts and Principles

Introduces the CIA triad, authentication, and authorisation fundamentals. These principles underpin every security decision covered throughout the course.

Lesson 1 • Firewall Technologies and Configuration

Covers stateful inspection, next-generation firewall features, and Cisco ASA/FTD basics. Learners configure access control policies to enforce perimeter security.

Lesson 2 • VPN and Secure Remote Access

Explains site-to-site and remote-access VPN technologies including IPsec and SSL/TLS. Learners configure Cisco AnyConnect and evaluate tunnel security parameters.

Lesson 3 • Wireless Network Security

Covers WPA3, rogue AP detection, and Cisco wireless controller security features. Learners assess and harden enterprise wireless deployments.

Lesson 4 • Secure Network Design Principles

Applies segmentation, DMZ design, and zero-trust concepts to network architecture. Establishes the structural foundation for all subsequent network security controls.

Lesson 1 • Host-Based Intrusion Detection

Explains HIDS/HIPS operation, log collection, and integrity monitoring tools. Learners configure host-based rules and correlate alerts with network events.

Lesson 2 • Malware Types and Defence Mechanisms

Classifies malware families and explains how antivirus, EDR, and application whitelisting counter them. Connects malware behaviour to detection strategy selection.

Lesson 3 • Cisco AMP and Endpoint Protection

Introduces Cisco Advanced Malware Protection deployment, policy configuration, and retrospective analysis. Learners interpret AMP alerts and tune detection policies.

Lesson 4 • Mobile Device and IoT Security

Addresses MDM policies, BYOD risks, and IoT device hardening strategies. Extends endpoint security principles to non-traditional networked devices.

Lesson 1 • Authentication Protocols and Standards

Examines RADIUS, TACACS+, LDAP, and SAML for enterprise authentication. Learners select appropriate protocols based on use case and security requirements.

Lesson 2 • Access Control Models and Auditing

Compares RBAC, ABAC, and MAC models and explains access review processes. Learners design audit trails that satisfy compliance and forensic requirements.

Lesson 3 • Cisco Identity Services Engine

Covers ISE architecture, policy sets, and 802.1X enforcement for wired and wireless access. Learners configure profiling, posture assessment, and guest portals.

Lesson 4 • Directory Services and Federation

Explains Active Directory structure, group policy, and federated identity across domains. Learners configure trust relationships and single sign-on integrations.

Lesson 1 • Threat Intelligence Integration

Covers threat intelligence feeds, IOC formats, and STIX/TAXII sharing standards. Learners enrich SIEM alerts with external intelligence to accelerate triage.

Lesson 2 • Network Traffic Analysis

Applies packet capture, flow analysis, and protocol dissection to identify malicious activity. Learners use Wireshark and NetFlow to investigate suspicious traffic patterns.

Lesson 3 • Security Information and Event Management

Explains SIEM log ingestion, correlation rules, and dashboard creation for threat visibility. Learners build detection use cases aligned to the MITRE ATT&CK framework.

Lesson 4 • Intrusion Detection and Prevention Systems

Covers signature, anomaly, and policy-based detection methods in IDS/IPS platforms. Learners configure Cisco Firepower rules and evaluate detection effectiveness.

Lesson 1 • Penetration Testing Fundamentals

Introduces the penetration testing lifecycle: reconnaissance, exploitation, post-exploitation, and reporting. Learners apply ethical hacking principles within authorised scopes.

Lesson 2 • Remediation and Risk Prioritisation

Applies risk-based prioritisation to vulnerability findings and tracks remediation through closure. Learners communicate risk to technical and non-technical stakeholders.

Lesson 3 • Vulnerability Assessment Methodology

Defines scoping, asset discovery, and credentialed scanning processes for vulnerability assessments. Establishes a repeatable workflow that feeds the remediation pipeline.

Lesson 4 • Common Attack Techniques and Exploits

Examines SQL injection, buffer overflow, credential attacks, and social engineering from an attacker perspective. Builds the offensive knowledge needed to design effective defences.

Lesson 1 • Cisco SecureX and SOAR Integration

Introduces SecureX orchestration, playbook automation, and cross-product pivot capabilities. Learners automate repetitive SOC tasks to reduce mean time to respond.

Lesson 2 • Security Operations Centre Functions

Describes SOC tiers, analyst roles, and operational workflows for continuous monitoring. Positions the SOC as the operational hub connecting all previous technical controls.

Lesson 3 • Incident Response Lifecycle

Applies the NIST incident response phases: preparation, detection, containment, eradication, and recovery. Learners execute tabletop exercises to validate response procedures.

Lesson 4 • Threat Hunting Techniques

Applies hypothesis-driven hunting using behavioural analytics, IOCs, and MITRE ATT&CK TTPs. Learners proactively search for threats that evade automated detection.

Lesson 1 • Container and DevSecOps Security

Addresses container image scanning, Kubernetes security, and integrating security into CI/CD pipelines. Bridges traditional security practices with modern software delivery.

Lesson 2 • Cloud Security Fundamentals

Covers the shared responsibility model, cloud service types, and common cloud misconfigurations. Establishes the cloud security baseline before introducing Cisco cloud controls.

Lesson 3 • Cisco Umbrella and DNS-Layer Security

Introduces Umbrella's DNS-layer enforcement, secure web gateway, and CASB capabilities. Learners configure policies to block malicious domains and control cloud app usage.

Lesson 4 • Security Programme Metrics and Continuous Improvement

Defines meaningful security KPIs, risk dashboards, and improvement cycles tied to business outcomes. Learners build a measurement framework that demonstrates programme maturity.