Corporate Security Course

Lesson 1 • Security Roles and Responsibilities

Defines accountability structures across employees, managers, and security teams. Establishes how role clarity reduces gaps and overlaps in protection efforts.

Lesson 2 • Security Principles and Core Concepts

Introduces confidentiality, integrity, and availability as the foundation of all security decisions. Connects these principles to every subsequent topic in the course.

Lesson 3 • Risk Management Fundamentals

Covers risk identification, assessment, and treatment options as the basis for security decision-making. Links risk tolerance to resource allocation and control selection.

Lesson 4 • Security Governance and Policy Basics

Introduces policy hierarchies, governance frameworks, and compliance obligations as organisational control mechanisms. Prepares learners to interpret and apply security policies.

Lesson 1 • Perimeter and Zone Security

Examines fencing, barriers, lighting, and security zones to deter and detect unauthorised access. Reinforces layered protection concepts introduced in Chapter 1.

Lesson 2 • Surveillance and Monitoring Systems

Teaches camera placement, recording retention, and alarm integration for continuous physical monitoring. Supports incident detection and evidence collection objectives.

Lesson 3 • Secure Workspace Practices

Establishes clean desk, screen lock, and secure printing habits that reduce physical data exposure. Translates policy requirements into daily employee behaviour.

Lesson 4 • Environmental Hazard Controls

Addresses fire suppression, flood protection, power redundancy, and temperature controls for critical spaces. Protects asset availability as defined in the CIA triad.

Lesson 1 • Data Loss Prevention Strategies

Examines DLP tools, endpoint controls, and monitoring techniques to prevent unauthorised data exfiltration. Reinforces the confidentiality principle from Chapter 1.

Lesson 2 • Secure Data Disposal and Destruction

Teaches sanitisation standards for digital and physical media to prevent data recovery after disposal. Addresses the full data lifecycle introduced in classification concepts.

Lesson 3 • Data Handling and Storage Controls

Covers secure storage, transmission, and access controls aligned to classification levels. Connects data sensitivity to specific technical and procedural safeguards.

Lesson 4 • Data Classification and Labeling

Introduces classification tiers, labelling standards, and ownership assignments to govern data handling. Provides the framework for all subsequent data protection decisions.

Lesson 1 • Endpoint Security Controls

Addresses antivirus, patch management, and device encryption as baseline endpoint protections. Connects endpoint hygiene to the broader defence-in-depth strategy.

Lesson 2 • Malware and Attack Recognition

Teaches identification of malware types, ransomware behaviours, and common attack indicators on endpoints. Prepares learners to detect threats before escalating to security teams.

Lesson 3 • Secure Internet and Email Practices

Covers safe browsing, email security settings, and attachment handling to reduce web-based attack exposure. Directly supports the threat vector awareness built in Chapter 2.

Lesson 4 • Network Security Fundamentals

Introduces firewalls, VPNs, network segmentation, and wireless security to protect data in transit. Reinforces encryption-in-transit concepts from the data security chapter.

Lesson 1 • Privileged Access Management

Addresses elevated account controls, just-in-time access, and privileged session monitoring to limit blast radius. Builds on privileged account concepts introduced in Chapter 4.

Lesson 2 • Access Review and Certification

Teaches periodic access review processes, certification campaigns, and remediation workflows to maintain least privilege. Supports audit and compliance obligations from Chapter 1.

Lesson 3 • Access Control Models and Principles

Compares role-based, attribute-based, and mandatory access control models and their appropriate use cases. Extends the least privilege and authentication concepts from Chapter 1.

Lesson 4 • Identity Lifecycle Management

Covers provisioning, modification, and deprovisioning of user identities across the employment lifecycle. Prevents orphaned accounts and unauthorised access from role changes.

Lesson 1 • Insider Threat Awareness

Covers behavioural indicators, motivations, and detection approaches for malicious and negligent insiders. Reinforces the role-based accountability framework from Chapter 1.

Lesson 2 • Psychological Manipulation Techniques

Examines urgency, authority, scarcity, and social proof as cognitive triggers exploited by attackers. Helps learners recognise manipulation before complying with requests.

Lesson 3 • Social Engineering Attack Taxonomy

Classifies phishing, vishing, smishing, pretexting, and baiting as distinct manipulation techniques. Establishes a shared vocabulary for all subsequent human-threat topics.

Lesson 4 • Building a Security-Aware Culture

Addresses how employee behaviour, peer accountability, and reporting norms reduce human-factor risk. Translates individual awareness into collective organisational resilience.

Lesson 1 • Lessons Learned and Continuous Improvement

Guides structured post-incident analysis to identify root causes and improve controls. Feeds findings back into risk management and policy processes established earlier.

Lesson 2 • Incident Classification and Triage

Defines incident severity levels, categorisation criteria, and initial triage steps to prioritise response. Builds on threat and attack knowledge from Chapters 2 and 4.

Lesson 3 • Evidence Collection and Chain of Custody

Covers digital evidence preservation, chain-of-custody documentation, and forensic handling basics. Ensures incident data remains admissible and actionable for investigations.

Lesson 4 • Communication During Incidents

Establishes internal notification trees, external disclosure obligations, and communication protocols under pressure. Connects to governance and regulatory compliance concepts from Chapter 1.

Lesson 1 • Business Continuity and Resilience Planning

Addresses BCP development, recovery time objectives, and resilience testing to sustain operations under disruption. Extends incident response and availability concepts from prior chapters.

Lesson 2 • Security Audits and Assessments

Teaches internal audit planning, vulnerability assessment cycles, and penetration test scoping to validate controls. Connects assessment findings to the risk register and remediation processes.

Lesson 3 • Security Metrics and Performance Measurement

Introduces KPIs, KRIs, and dashboard design to quantify security programme effectiveness. Enables data-driven decisions across all control domains covered in the course.

Lesson 4 • Security Programme Design and Governance

Covers security programme structure, executive sponsorship, and governance committee design for sustained effectiveness. Synthesises governance concepts from Chapter 1 at a strategic level.