Security Course

Lesson 1 • Understanding the Threat Landscape

Surveys attacker types, motivations, and common attack vectors. Contextualises why security measures are necessary in modern environments.

Lesson 2 • Security Policies and Governance Basics

Introduces policy frameworks, roles, and accountability structures. Connects organisational governance to technical security decisions.

Lesson 3 • Core Security Concepts and Terminology

Defines confidentiality, integrity, availability, and key vocabulary. Provides the shared language needed for all subsequent security topics.

Lesson 1 • Intrusion Detection and Prevention

Covers signature-based and anomaly-based detection, alert tuning, and response. Extends perimeter defence with active monitoring capabilities.

Lesson 2 • Wireless Network Security

Examines wireless encryption standards, rogue access points, and secure configuration. Addresses the unique attack surface introduced by wireless connectivity.

Lesson 3 • Secure Remote Access and VPNs

Addresses tunnelling protocols, authentication methods, and split-tunnelling risks. Ensures students can secure remote connectivity for distributed workforces.

Lesson 4 • Network Architecture and Protocols

Reviews TCP/IP stack, common protocols, and network segmentation. Establishes the technical baseline for analysing network-based attacks.

Lesson 1 • Authentication Methods and Protocols

Compares password-based, multi-factor, and certificate-based authentication. Grounds access control decisions in proven authentication mechanisms.

Lesson 2 • Privileged Access Management

Focuses on securing administrative accounts, credential vaulting, and session monitoring. Reduces the blast radius of compromised high-privilege credentials.

Lesson 3 • Authorisation Models and Access Control

Covers DAC, MAC, RBAC, and ABAC models with practical application scenarios. Connects authentication outcomes to appropriate resource access decisions.

Lesson 1 • Cryptographic Fundamentals

Explains encryption, hashing, and digital signatures at a conceptual and practical level. Provides the theoretical base for all applied cryptography topics.

Lesson 2 • Public Key Infrastructure

Covers certificate authorities, certificate lifecycle, and trust chains. Enables students to design and manage PKI deployments for organisational use.

Lesson 3 • Data-at-Rest Encryption

Addresses full-disk, file-level, and database encryption strategies and key management. Protects stored data from unauthorised access and physical theft.

Lesson 4 • Data Loss Prevention Strategies

Introduces DLP tools, data classification, and exfiltration detection techniques. Connects cryptographic controls to broader data governance objectives.

Lesson 1 • Reconnaissance and Information Gathering

Covers passive and active reconnaissance techniques and OSINT sources. Builds the attacker's perspective needed to understand real-world threat behaviour.

Lesson 2 • Exploitation Techniques and Tools

Demonstrates common exploitation methods including buffer overflows and injection attacks. Provides hands-on understanding of how vulnerabilities are weaponised.

Lesson 3 • Reporting and Remediation Guidance

Structures findings into risk-rated reports with actionable remediation steps. Closes the offensive cycle by translating technical results into business value.

Lesson 4 • Vulnerability Scanning and Analysis

Teaches automated scanning, manual validation, and vulnerability prioritisation. Bridges reconnaissance findings with actionable exploitation planning.

Lesson 1 • OWASP Top Vulnerabilities

Analyses the most critical web application vulnerabilities, their root causes, and mitigations. Provides a practical taxonomy for identifying and fixing common flaws.

Lesson 2 • Input Validation and Output Encoding

Teaches allowlist validation, parameterised queries, and context-aware encoding. Directly mitigates injection and XSS vulnerabilities identified in prior sections.

Lesson 3 • Secure Software Development Lifecycle

Introduces security gates, threat modelling, and security requirements in SDLC phases. Establishes how security is embedded from design through deployment.

Lesson 4 • Static and Dynamic Application Testing

Covers SAST, DAST, and interactive testing tools integrated into CI/CD pipelines. Enables automated security feedback during development and pre-release stages.

Lesson 1 • Security Operations Centre Functions

Defines SOC tiers, analyst roles, and operational workflows. Establishes the organisational context for detection and response activities.

Lesson 2 • Incident Response Lifecycle

Walks through preparation, detection, containment, eradication, and recovery phases. Gives students a repeatable framework for managing security incidents.

Lesson 3 • Threat Hunting and Detection Engineering

Teaches hypothesis-driven hunting, detection rule development, and adversary emulation. Advances SOC capabilities beyond reactive alerting to proactive threat discovery.

Lesson 4 • Digital Forensics Fundamentals

Introduces evidence preservation, chain of custody, and forensic analysis techniques. Supports incident investigations with legally defensible evidence handling.

Lesson 1 • Security Programme Development

Covers programme charter, roadmap creation, and capability maturity assessment. Enables students to build and mature a security programme from the ground up.

Lesson 2 • Cloud Security Architecture

Addresses shared responsibility, cloud-native controls, and multi-cloud security design. Extends on-premises architecture skills to cloud and hybrid environments.

Lesson 3 • Business Continuity and Resilience Planning

Integrates BCP, DRP, and resilience design into the security architecture. Ensures security programmes account for operational continuity under adverse conditions.

Lesson 4 • Enterprise Security Architecture Frameworks

Surveys architecture frameworks, reference models, and design principles. Provides the structural vocabulary for designing cohesive enterprise security programmes.