Course Syllabus

Module 1: Security Fundamentals & Threat Landscape (4 hrs)

• Introduce core cybersecurity concepts: CIA triad, threat types, attacker motivations, and defense-in-depth strategies
• Survey common cyber threats: malware, ransomware, phishing, social engineering, insider threats .

Module 2: Network & System Security (6 hrs)

• Teach network architecture, segmentation, firewalls, IDS/IPS, and secure configurations.
• Demonstrate secure OS hardening and endpoint protection using Cyber Essentials controls  .

Module 3: Identity, Access & Authentication (4 hrs)

• Dive into IAM, RBAC, MFA, SSO, and best practices for password policies .

Module 4: Secure Coding & Application Security (4 hrs)

• Cover secure software development life cycle (SDLC), input validation, error handling, and OWASP Top 10 vulnerabilities

Module 5: Ethical Hacking & Vulnerability Assessment (6 hrs)

• Train on reconnaissance, scanning, exploitation techniques.
• Hands-on labs using vulnerability scanners and penetration testing tools aligned with ethical hacking essentials

Module 6: Digital Forensics & Incident Response (6 hrs)

• Explore forensic processes: evidence handling, disk/network forensics, log analysis.
• Incident response lifecycle: detection, containment, eradication, recovery .

Module 7: Security Awareness & Social Engineering (4 hrs)

• Build awareness to counter phishing, tailgating, spear phishing, smishing, vishing
• Use simulations and gamified training to promote real behavioral change

Module 8: SIEM, Log Management & Monitoring (4 hrs)

• Implement SIEM solutions, traffic monitoring, UEBA integration.
• Analyze logs for threats, and manage alerts and incident analysis

Module 9: Cloud & Virtual Environments Security (4 hrs)

• Secure cloud workloads, containerization, virtualization, and cloud-native threats.

Module 10: Governance, Risk & Compliance + Capstone (2 hrs)

• Cover risk management, policy frameworks, compliance standards (ISO 27001, HIPAA, GDPR).
• Finish with a capstone CTF-style exercise to reinforce knowledge using capture‑the‑flag methodology