Online CC cybersecurity course

Lesson 1 • Security Frameworks Overview

Surveys widely adopted control frameworks and risk management standards used across industries. Students select appropriate frameworks based on organisational context.

Lesson 2 • The CIA Triad and Security Goals

Defines confidentiality, integrity, and availability as measurable security properties. Anchors every subsequent control discussion to these three goals.

Lesson 3 • Core Security Terminology

Introduces vulnerability, exploit, attack vector, and attack surface as precise technical terms. Provides shared language for all later technical chapters.

Lesson 1 • IP Addressing and Subnetting

Covers IPv4 and IPv6 addressing, CIDR notation, and subnet design for security segmentation. Enables accurate network topology analysis.

Lesson 2 • Packet Analysis with Capture Tools

Introduces packet capture workflows and filter syntax for isolating suspicious traffic. Students interpret captures to identify credential exposure and data leakage.

Lesson 3 • Network Segmentation and DMZ Design

Explains VLANs, DMZ architecture, and micro-segmentation as layered defences. Students design segmented networks that limit lateral movement.

Lesson 4 • OSI and TCP/IP Models

Maps each OSI layer to real protocols and explains where attacks occur at each layer. Provides the structural lens for all network-based threat analysis.

Lesson 1 • Hashing and Data Integrity

Covers cryptographic hash functions, collision resistance, and HMAC for integrity verification. Connects hashing to password storage and file integrity monitoring.

Lesson 2 • Cryptographic Failures and Pitfalls

Identifies weak algorithms, improper key management, and implementation errors that undermine encryption. Students audit systems for cryptographic weaknesses.

Lesson 3 • TLS and Secure Protocol Configuration

Details TLS handshake, cipher suite selection, and common misconfiguration vulnerabilities. Students harden TLS deployments against downgrade and interception attacks.

Lesson 4 • Symmetric and Asymmetric Encryption

Contrasts block and stream ciphers with public-key algorithms by performance and use case. Students select appropriate algorithms for given data protection requirements.

Lesson 1 • Operating System Security Baselines

Applies configuration benchmarks to reduce attack surface on Windows and Linux systems. Establishes repeatable hardening procedures for enterprise deployments.

Lesson 2 • User and Privilege Management

Implements least-privilege principles, role-based access, and privileged account controls. Reduces insider threat and credential-based attack impact.

Lesson 3 • Patch and Vulnerability Management

Establishes patch prioritisation workflows using severity scoring and asset criticality. Students build a vulnerability management programme from discovery to remediation.

Lesson 4 • Endpoint Detection and Response

Deploys EDR agents and interprets telemetry to detect malware, persistence, and lateral movement. Connects endpoint signals to broader incident investigation workflows.

Lesson 1 • Authentication Mechanisms and Protocols

Compares password, token, biometric, and certificate-based authentication by assurance level. Provides the basis for selecting controls matched to risk.

Lesson 2 • Multi-Factor Authentication Implementation

Configures TOTP, push notification, and hardware key MFA across enterprise applications. Students evaluate MFA bypass risks and apply compensating controls.

Lesson 3 • Zero-Trust Access Architecture

Applies continuous verification, device posture checks, and least-privilege access to replace perimeter trust. Students design zero-trust policies for hybrid environments.

Lesson 4 • Single Sign-On and Federation

Implements SAML and OIDC federation for SSO across cloud and on-premises applications. Students troubleshoot trust relationships and token validation errors.

Lesson 1 • Findings Reporting and Remediation

Structures penetration test reports with executive summaries, technical findings, and risk ratings. Students communicate vulnerabilities to both technical and non-technical audiences.

Lesson 2 • Penetration Testing Methodology

Defines scoping, rules of engagement, and phased testing methodology for authorised assessments. Establishes the legal and ethical boundaries of offensive security work.

Lesson 3 • Reconnaissance and OSINT

Applies passive and active reconnaissance techniques to map target attack surfaces before exploitation. Students use OSINT tools to gather actionable intelligence.

Lesson 4 • Post-Exploitation and Lateral Movement

Demonstrates privilege escalation, persistence mechanisms, and lateral movement after initial access. Students map attacker paths to understand defensive gaps.

Lesson 1 • Threat Detection and Alert Triage

Develops detection rules aligned to adversary tactics and triages alerts by severity and context. Reduces false-positive fatigue through tuning and enrichment.

Lesson 2 • Post-Incident Review and Improvement

Conducts blameless post-incident reviews to identify detection gaps and control failures. Outputs drive measurable improvements to detection and response capabilities.

Lesson 3 • Digital Forensics Fundamentals

Collects and preserves digital evidence using forensically sound methods to maintain chain of custody. Students analyse disk images and memory dumps for attacker artefacts.

Lesson 4 • Log Collection and SIEM Architecture

Designs log source onboarding, normalisation, and retention policies for a SIEM platform. Ensures complete visibility across endpoints, network, and cloud sources.

Lesson 1 • Building a Security Roadmap

Prioritises security investments using risk data, maturity assessments, and business strategy alignment. Students deliver a multi-year security improvement roadmap.

Lesson 2 • Compliance and Audit Readiness

Maps organisational controls to regulatory and industry compliance requirements and prepares audit evidence. Students conduct internal control assessments.

Lesson 3 • Enterprise Risk Management

Quantifies and qualifies cyber risk using likelihood-impact matrices and risk appetite statements. Connects technical risk findings to business decision-making.

Lesson 4 • Security Policy and Standards Development

Authors security policies, standards, and procedures that translate governance intent into operational controls. Students build a policy hierarchy for an enterprise.