Course Syllabus

Module 1: Security Foundations & Risk Management (6 h)

• Topics: CIA triad, risk assessment framework, threat modeling, compliance (GDPR, HIPAA, PCI-DSS)
• Description: Establishes core principles of confidentiality, integrity, availability, and introduces risk methodologies and legal/regulatory drivers
• Features: Case studies of breaches, interactive risk scoring exercises.

Module 2: Human & Physical Security (4 h)

• Topics: Social engineering, insider threats, physical controls, clean desk policies
• Description: Explores behavior-based risks, human vulnerability, and mitigation via awareness and environmental design
• Features: Phishing simulations, role-play scenarios.

Module 3: Endpoint & Data Protection (5 h)

• Topics: Antivirus, EDR, disk encryption, email/mobile security, DLP
• Description: Teaches securing devices and protecting data with encryption, secure configuration, and profile hardening
• Features: Lab-based encryption setup and policy application exercises.

Module 4: Network Security and Secure Architecture (6 h)

• Topics: Network segmentation, firewalls, IDS/IPS, VPN, secure architecture
• Description: Focus on perimeter defense, secure network design, detection systems/functions.
• Features: Simulators for firewall rules and traffic filtering.

Module 5: Identity & Access Management (IAM) (5 h)

• Topics: Authentication, MFA, SSO, RBAC, privileged access
• Description: Covers effective user identity models, policy enforcement, and administrative controls.
• Features: Configuring access controls in lab environments.

Module 6: Vulnerability Management & Secure Configuration (4 h)

• Topics: Patch management, configuration baselines, vulnerability scanning
• Description: Introduces systematic scanning, remediation workflows, and configuration hardening.
• Features: Live vulnerability scans and prioritized remediation labs.

Module 7: Incident Response & Forensics (6 h)

• Topics: IR lifecycle, evidence collection, forensic analysis, chain of custody
• Description: Uses real-world incidents to guide through triage, containment, and analysis protocols
• Features: Forensic toolkit demos, simulated IR tabletop exercises.

Module 8: Penetration Testing & Ethical Hacking (4 h)

• Topics: Reconnaissance, scanning, exploitation fundamentals
• Description: Teaches defenders to understand attacker techniques and proactively test defenses.
• Features: Hands-on labs using Kali or similar pentest tools.

Module 9: Emerging Trends & Capstone (4 h)

• Topics: Cloud, IoT/OT, AI security, zero trust concepts
• Description: Introduces advanced domains and culminates in a mini‑project applying modules 1–8.
• Features: Group capstone with threat modeling, IR scenario, pentest and risk mitigation plans.

• Key Features

  • Live instructor-led sessions (virtual or in-person)
  • High engagement labs (~50% practical time) using real and simulated tools
  • Interactive assessments: quizzes, phishing campaigns, tabletop drills
  • Capstone project integrating risk, design, detection, and pentesting
  • Certification prep support for CISSP, CompTIA Security+, etc., with domain coverage
  • Human‑centric focus: gamified security awareness modules and behavior analytics