Introduction to cybersecurity principles and terminology

The CIA Triad (Confidentiality, Integrity, Availability)

Types of threat actors (hacktivists, insiders, nation-states)

Security controls (preventive, detective, corrective)

Security roles and responsibilities

Importance of security awareness and training

Common attack types (phishing, malware, ransomware, DoS, MITM)

Social engineering techniques and prevention

Vulnerability scanning and penetration testing

Security assessments and threat intelligence

Indicators of compromise (IoCs)

Risk types and threat modeling

Secure network architecture (DMZ, segmentation, VPNs)

Security implications of virtualization and cloud computing

Application security principles

Embedded systems and IoT risks

Defense in depth and layered security

Secure configurations and system hardening

Identity and Access Management (IAM)

• Authentication methods (MFA, biometrics, tokens)

• Access control models (RBAC, ABAC, DAC)

Cryptography and PKI basics

Wireless and mobile device security

Secure protocols (HTTPS, SSH, TLS, IPsec)

Endpoint and network security tools

Patch management and system updates

Incident response process (preparation, detection, response, recovery)

Digital forensics basics (chain of custody, evidence handling)

Business continuity and disaster recovery planning

Governance and compliance frameworks (GDPR, HIPAA, PCI-DSS)

Risk management concepts (likelihood, impact, risk response)

Security policies, procedures, and documentation