Cybersecurity curriculum

18 modules that take you from security basics to hands-on tools and career paths.

Course content

Program modules

01Introduction to Cybersecurity

  • Definition and scope of cybersecurity in modern digital environments.
  • Why cybersecurity is critical for individuals, organizations, and governments.
  • Common types of cyber attacks and real-world consequences.
  • Basic cybersecurity terminology learners must understand.
  • Overview of how the course is structured and what learners will achieve.

02Core Cybersecurity Concepts

  • The CIA Triad: Confidentiality, Integrity, and Availability explained in depth.
  • Authentication, authorization, and identity verification concepts.
  • Non-repudiation and accountability in digital systems.
  • Principle of least privilege and access minimization.
  • Defense in depth and layered security strategies.

03Operating Systems Overview

  • What an operating system is and why it is a major attack target.
  • Core OS functions: process, memory, and file system management.
  • Differences between user mode and kernel mode.
  • Windows, Linux, and macOS architecture and use cases.
  • Operating system security features and common weaknesses.

04Networking Fundamentals

  • Networking concepts and how devices communicate.
  • Types of networks (LAN, WAN, MAN, Internet) and their use cases.
  • IP addressing (IPv4, IPv6, public vs private, static vs dynamic)
  • OSI model and TCP/IP model with layer responsibilities.
  • Why networking knowledge is essential for cybersecurity defense.

05Network Devices & Topologies

  • Routers, switches, and how traffic flows in networks.
  • Firewalls, IDS, and IPS and their security roles.
  • Network topologies and how design impacts security.
  • DMZs and network segmentation for risk reduction.
  • Security risks caused by device misconfiguration.

06Security Controls & Frameworks

  • Purpose of security controls in risk reduction.
  • Administrative, technical, and physical controls explained.
  • Control types: preventive, detective, corrective, deterrent, compensating.
  • Overview of major frameworks (NIST, ISO 27001, CIS Controls)
  • Why frameworks are essential for structured security programs.

07Authentication & Access Control

  • Authentication concepts and identity verification methods.
  • Password-based authentication risks and best practices.
  • Multi-factor authentication and biometric systems.
  • Access control models (DAC, MAC, RBAC).
  • Common authentication attacks and how to mitigate them.

08Cryptography Basics

  • Purpose of cryptography in protecting data.
  • Encryption vs hashing and real-world use cases.
  • Symmetric and asymmetric encryption methods.
  • SSL/TLS and digital certificates for secure communication.
  • Cryptographic failures and their impact on security.

09Common Cybersecurity Threats

  • Malware types including viruses, worms, and trojans.
  • Ransomware attacks and how they spread.
  • Phishing, social engineering, and user manipulation.
  • DDoS attacks and service disruption.
  • Business, financial, and reputational impact of threats.

10Vulnerabilities & Exploits

  • Definition of vulnerabilities and why they exist.
  • Exploits and how attackers weaponize weaknesses.
  • Common vulnerability types (SQL injection, XSS, misconfigurations)
  • CVE system and vulnerability disclosure.
  • Patch management and risk prioritization.

11Social Engineering & Physical Security

  • Social engineering techniques and human manipulation.
  • Phishing, spear phishing, and pretexting attacks.
  • Physical security threats such as tailgating.
  • Importance of awareness and behavioral controls.
  • Real-world social engineering incidents.

12Incident Response & Handling

  • What constitutes a cybersecurity incident.
  • Incident response lifecycle phases.
  • Detection, analysis, and containment strategies.
  • Eradication, recovery, and system restoration.
  • Lessons learned and continuous improvement.

13Cloud Security Fundamentals

  • Cloud computing concepts and service models.
  • Shared responsibility model explained clearly.
  • Cloud identity and access management.
  • Cloud misconfigurations and common risks.
  • Cloud security tools and real-world incidents.

14Vulnerability Assessment & Penetration Testing

  • Difference between vulnerability assessment and penetration testing.
  • Automated scanning tools and their limitations.
  • Manual testing and attacker simulation.
  • Legal scope, authorization, and rules of engagement.
  • Reporting, remediation, and business value.

15Security Policies, Governance & Compliance

  • Role of security policies in organizations.
  • Governance and management accountability.
  • Compliance requirements and regulatory drivers.
  • Key standards such as GDPR and PCI-DSS.
  • Risk management and audit processes.

16Security Monitoring & SIEM

  • Purpose of continuous security monitoring.
  • Log generation and analysis fundamentals.
  • SIEM systems and centralized visibility.
  • Alerts, correlation, and threat detection.
  • SOC roles and operational importance.

17Security Awareness & Training

  • Human risk as a major attack vector.
  • Security awareness training objectives.
  • Phishing simulations and behavior testing.
  • Remote work, device security, and password hygiene.
  • Building a culture of shared security responsibility.

18Career Paths & Security Tools Overview

  • Overview of cybersecurity career paths.
  • Entry-level and advanced security roles.
  • Blue team vs red team responsibilities.
  • Common security tools and technologies.
  • Learning paths, certifications, and career advice.