1. Security Basics
Vocabulary
()
Security controls: Categories
()
Security controls: Types
()
Physical security controls
()
2. Cryptography
Cryptography intro
()
Password hashing
()
Hashing: Demo
()
Encryption (symmetric)
()
Encryption (asymmetric)
()
PKI and certificates
()
PKI demo
()
Uses of cryptography
()
Cryptographic tools
()
3. Threats
Threat actors
()
Threat vectors
()
Social engineering
()
4. Attacks
Cryptographic attacks
()
Hardware attacks
()
Network and application attacks
()
Malware
()
SQL injection
()
Vulnerabilities
()
CSRF
()
Directory traversal
()
Pass the hash
()
XSS
()
5. Identity and Access Management
Privileged access
()
IAM
()
Password concepts
()
MFA
()
Access control models
()
6. Organizational Security
Enterprise security
()
Application security
()
7. Network Security Devices
Firewalls
()
Network ports
()
Load balancer
()
IDS/IPS
()
Wireless security
()
VPN
()
Honeypots
()
Email security
()
8. Security Operations
Change management
()
System hardening
()
Secure baselines
()
Security technologies
()
Security monitoring
()
SIEM
()
9. Virtualization
Virtualization
()
Orchestration
()
Cloud service models
()
10. Mobile Security
Mobile device deployment
()
Mobile device management
()
11. Vulnerability Management
Vulnerability identification
()
Vulnerability analysis
()
Vulnerability management
()
Vulnerability response
()
12. Risk Management
Risk analysis
()
Risk management
()
13. Incident Response
Backups
()
Backup topics
()
Continuity of operations (COOP)
()
BIA
()
Incident response
()
Digital forensics
()
14. Data Protection
Data protection
()
Data classification
()
Data destruction
()
Data privacy
()
15. Governance
Security governance
()
Asset management
()
Policies
()
Pen testing
()
Audits and assessments
()
Third-party oversight
()
Legal considerations
()
Security awareness
()