Cybersecurity Foundations Course

Lesson 1 • Security Frameworks and Standards Overview

Surveys widely adopted control frameworks and risk management standards. Provides a reference structure for organising security programmes.

Lesson 2 • Threat Actors and Motivations

Profiles nation-states, cybercriminals, insiders, and hacktivists. Understanding actor motivation shapes defensive prioritisation.

Lesson 3 • Core Security Principles and Terminology

Introduces the CIA triad, authentication, authorisation, and non-repudiation. Establishes shared vocabulary used throughout the entire course.

Lesson 1 • Network Segmentation and Architecture

Covers DMZ design, VLANs, and zero-trust segmentation principles. Segmentation limits lateral movement and contains breach impact.

Lesson 2 • IP Addressing and Routing Concepts

Explains IPv4 and IPv6 addressing, subnetting, and routing decisions. Accurate address knowledge is prerequisite for firewall and access control configuration.

Lesson 3 • Core Network Protocols and Services

Examines DNS, DHCP, HTTP/S, SMTP, and FTP from a security perspective. Identifies protocol weaknesses exploited in common attacks.

Lesson 4 • Network Models and Protocol Stack

Covers OSI and TCP/IP models, layer functions, and protocol roles. Provides the structural lens for analysing all subsequent network security topics.

Lesson 1 • System Hardening Techniques

Applies CIS benchmark concepts to reduce attack surface on both platforms. Hardening directly reduces exploitable entry points.

Lesson 2 • User and Access Management

Implements least-privilege, role-based access, and account lifecycle controls. Proper access management prevents unauthorised resource use.

Lesson 3 • Windows Security Architecture

Explores Windows authentication, privilege model, and registry security. Establishes the host-level foundation for endpoint defence.

Lesson 4 • System Logging and Monitoring

Configures event logging, log forwarding, and baseline monitoring on host systems. Logs are the primary evidence source for incident detection.

Lesson 1 • Cryptography Fundamentals

Defines encryption, hashing, and digital signatures with mathematical intuition. Provides conceptual grounding before applied protocol study.

Lesson 2 • Secure Protocol Implementation

Applies cryptographic primitives in TLS, SSH, IPsec, and VPN protocols. Connects theory to the protocols learners encounter in practice.

Lesson 3 • Public Key Infrastructure

Explains certificate authorities, certificate lifecycle, and trust chains. PKI underpins TLS, code signing, and identity verification.

Lesson 4 • Symmetric and Asymmetric Algorithms

Compares AES, RSA, ECC, and related algorithms on security and performance. Algorithm selection directly affects system security posture.

Lesson 1 • Malware Classification and Behaviour

Categorises viruses, worms, ransomware, rootkits, and spyware by behaviour. Behavioural understanding drives detection and response decisions.

Lesson 2 • Vulnerability Assessment Concepts

Introduces CVSS scoring, vulnerability scanning, and prioritisation frameworks. Structured assessment translates threat knowledge into remediation action.

Lesson 3 • Network-Based Attack Techniques

Covers denial-of-service, man-in-the-middle, and packet injection attacks. Network attack knowledge informs firewall and IDS rule design.

Lesson 4 • Web Application Attack Techniques

Examines SQL injection, XSS, CSRF, and broken authentication vulnerabilities. Web attacks are among the most prevalent threat vectors in practice.

Lesson 1 • Wireless Network Security

Secures Wi-Fi with WPA3, enterprise authentication, and rogue AP detection. Wireless networks present unique perimeter challenges requiring dedicated controls.

Lesson 2 • Firewall Technologies and Rule Design

Compares packet-filter, stateful, and next-generation firewalls and their rule logic. Correct rule design is the primary perimeter control mechanism.

Lesson 3 • Intrusion Detection and Prevention Systems

Covers signature-based and anomaly-based IDS/IPS deployment and tuning. Properly tuned sensors reduce alert fatigue and improve detection fidelity.

Lesson 4 • Secure Remote Access Solutions

Implements VPN, zero-trust network access, and jump server architectures. Remote access controls prevent unauthorised entry from external networks.

Lesson 1 • Threat Detection and Hunting

Applies indicator-of-compromise searches and hypothesis-driven threat hunting. Proactive hunting finds threats that evade automated detection.

Lesson 2 • Security Information and Event Management

Configures SIEM log ingestion, correlation rules, and dashboards for threat detection. SIEM is the central visibility platform for security operations.

Lesson 3 • Digital Forensics Fundamentals

Applies evidence preservation, chain of custody, and forensic imaging techniques. Forensic integrity ensures findings are admissible and defensible.

Lesson 4 • Incident Response Lifecycle

Executes preparation, detection, containment, eradication, and recovery phases. A structured lifecycle reduces breach impact and recovery time.

Lesson 1 • Compliance and Audit Management

Maps controls to regulatory requirements and manages internal and external audits. Compliance evidence demonstrates due diligence to stakeholders.

Lesson 2 • Security Metrics and Reporting

Defines KPIs, KRIs, and executive dashboards that communicate security posture. Metrics translate technical findings into business-relevant language.

Lesson 3 • Security Policy and Standards Development

Drafts acceptable-use, data classification, and incident response policies. Policies formalise security expectations and provide enforcement authority.

Lesson 4 • Risk Assessment Methodologies

Executes qualitative and quantitative risk assessments using likelihood and impact analysis. Risk assessment outputs drive resource allocation and control selection.