Cybersecurity curriculum
18 modules that take you from security basics to hands-on tools and career paths.
Course content
Program modules
01Introduction to Cybersecurity
- Definition and scope of cybersecurity in modern digital environments.
- Why cybersecurity is critical for individuals, organizations, and governments.
- Common types of cyber attacks and real-world consequences.
- Basic cybersecurity terminology learners must understand.
- Overview of how the course is structured and what learners will achieve.
02Core Cybersecurity Concepts
- The CIA Triad: Confidentiality, Integrity, and Availability explained in depth.
- Authentication, authorization, and identity verification concepts.
- Non-repudiation and accountability in digital systems.
- Principle of least privilege and access minimization.
- Defense in depth and layered security strategies.
03Operating Systems Overview
- What an operating system is and why it is a major attack target.
- Core OS functions: process, memory, and file system management.
- Differences between user mode and kernel mode.
- Windows, Linux, and macOS architecture and use cases.
- Operating system security features and common weaknesses.
04Networking Fundamentals
- Networking concepts and how devices communicate.
- Types of networks (LAN, WAN, MAN, Internet) and their use cases.
- IP addressing (IPv4, IPv6, public vs private, static vs dynamic)
- OSI model and TCP/IP model with layer responsibilities.
- Why networking knowledge is essential for cybersecurity defense.
05Network Devices & Topologies
- Routers, switches, and how traffic flows in networks.
- Firewalls, IDS, and IPS and their security roles.
- Network topologies and how design impacts security.
- DMZs and network segmentation for risk reduction.
- Security risks caused by device misconfiguration.
06Security Controls & Frameworks
- Purpose of security controls in risk reduction.
- Administrative, technical, and physical controls explained.
- Control types: preventive, detective, corrective, deterrent, compensating.
- Overview of major frameworks (NIST, ISO 27001, CIS Controls)
- Why frameworks are essential for structured security programs.
07Authentication & Access Control
- Authentication concepts and identity verification methods.
- Password-based authentication risks and best practices.
- Multi-factor authentication and biometric systems.
- Access control models (DAC, MAC, RBAC).
- Common authentication attacks and how to mitigate them.
08Cryptography Basics
- Purpose of cryptography in protecting data.
- Encryption vs hashing and real-world use cases.
- Symmetric and asymmetric encryption methods.
- SSL/TLS and digital certificates for secure communication.
- Cryptographic failures and their impact on security.
09Common Cybersecurity Threats
- Malware types including viruses, worms, and trojans.
- Ransomware attacks and how they spread.
- Phishing, social engineering, and user manipulation.
- DDoS attacks and service disruption.
- Business, financial, and reputational impact of threats.
10Vulnerabilities & Exploits
- Definition of vulnerabilities and why they exist.
- Exploits and how attackers weaponize weaknesses.
- Common vulnerability types (SQL injection, XSS, misconfigurations)
- CVE system and vulnerability disclosure.
- Patch management and risk prioritization.
11Social Engineering & Physical Security
- Social engineering techniques and human manipulation.
- Phishing, spear phishing, and pretexting attacks.
- Physical security threats such as tailgating.
- Importance of awareness and behavioral controls.
- Real-world social engineering incidents.
12Incident Response & Handling
- What constitutes a cybersecurity incident.
- Incident response lifecycle phases.
- Detection, analysis, and containment strategies.
- Eradication, recovery, and system restoration.
- Lessons learned and continuous improvement.
13Cloud Security Fundamentals
- Cloud computing concepts and service models.
- Shared responsibility model explained clearly.
- Cloud identity and access management.
- Cloud misconfigurations and common risks.
- Cloud security tools and real-world incidents.
14Vulnerability Assessment & Penetration Testing
- Difference between vulnerability assessment and penetration testing.
- Automated scanning tools and their limitations.
- Manual testing and attacker simulation.
- Legal scope, authorization, and rules of engagement.
- Reporting, remediation, and business value.
15Security Policies, Governance & Compliance
- Role of security policies in organizations.
- Governance and management accountability.
- Compliance requirements and regulatory drivers.
- Key standards such as GDPR and PCI-DSS.
- Risk management and audit processes.
16Security Monitoring & SIEM
- Purpose of continuous security monitoring.
- Log generation and analysis fundamentals.
- SIEM systems and centralized visibility.
- Alerts, correlation, and threat detection.
- SOC roles and operational importance.
17Security Awareness & Training
- Human risk as a major attack vector.
- Security awareness training objectives.
- Phishing simulations and behavior testing.
- Remote work, device security, and password hygiene.
- Building a culture of shared security responsibility.
18Career Paths & Security Tools Overview
- Overview of cybersecurity career paths.
- Entry-level and advanced security roles.
- Blue team vs red team responsibilities.
- Common security tools and technologies.
- Learning paths, certifications, and career advice.
