INDIVIDUAL TRAINING CYBER SECURITY

Build Security Skills. Protect What Matters.

Develop practical cybersecurity fundamentals through systems, networking, security controls, threat awareness, monitoring, and incident response. Learn through guided exercises and authorized labs designed to connect security concepts with responsible defensive practice.

Practical skills. Purposeful technology. Real-world application.

A learner reviewing defensive security information in a controlled training environment

THE PROGRAM

Build the Foundations to Understand, Assess, and Defend Systems.

Follow a progressive learning journey from security principles and system fundamentals to networking, identity, secure configuration, threat detection, and incident response. Each stage includes practical checkpoints before learners move to more complex scenarios.

01

144 Hours of Structured Learning

Build your capabilities through a paced program with time to understand concepts, practice in a controlled environment, and review your work.

  • 48 learning sessions
  • 3 hours per session
  • Guided learning and independent practice
02

A Progressive Security Journey

Move from core systems and networking knowledge to security controls, monitoring, incident response, and applied defensive work.

  • Operating systems and networking
  • Threats, vulnerabilities, and controls
  • Monitoring and incident response
03

Practice Responsibly

Use guided exercises, prepared evidence, and authorized labs to develop sound security habits without putting real systems or data at risk.

  • Controlled, instructor-scoped labs
  • Practical checkpoints and feedback
  • Defensive portfolio project

LEARNING OUTCOMES

Move from Security Concepts to Evidence-Based Defensive Practice.

Develop the skills to understand system and network behavior, recognize common risks, apply foundational controls, and investigate prepared security evidence. The goal is to build disciplined habits: validate what the evidence shows, document uncertainty, and act only within an authorized scope.

01

Understand Security Risk

Describe what needs protection and why a security issue matters in its business context.

  • Identify assets, threats, vulnerabilities, and impact
  • Record practical risks and assumptions
02

Work with Systems & Networks

Use foundational operating-system and networking knowledge to interpret security-related behavior.

  • Windows, Linux, and command-line basics
  • Protocols, web flows, and sample packet evidence
03

Apply Core Security Controls

Explain and assess common controls that protect identities, devices, networks, and data.

  • Least privilege, MFA, and secure configuration
  • Encryption, backups, and layered controls
04

Recognize Threats & Weaknesses

Interpret common threat patterns and turn validated findings into proportionate defensive actions.

  • Threat and vulnerability fundamentals
  • Risk-based remediation planning
05

Investigate Alerts & Logs

Use prepared logs and alerts to build a timeline, document evidence, and determine sensible next steps.

  • SIEM and detection concepts
  • Alert triage and incident documentation
06

Present a Defensive Project

Bring the core workflow together in a scoped project with evidence, recommendations, and clearly stated limitations.

  • Authorized lab or simulated scenario
  • Portfolio report and presentation

PROGRAM CURRICULUM

From Security Fundamentals to Applied Defensive Practice.

Explore the modules, learning objectives, topics, and subtopics that guide the program. Each stage builds on the previous one, with practical checkpoints and authorized lab work before learners progress to more complex security scenarios.

Module Learning Objective

Understand what cybersecurity protects, how risk is described, and why all security testing must be authorized, scoped, and conducted responsibly. Establish a shared vocabulary before working with systems or security tools.

  • Distinguish information security, cybersecurity, privacy, and operational resilience
  • Explore defensive security, security operations, governance, and ethical testing roles
  • Recognize common organizational assets and the consequences of compromise
  • Connect security work to business continuity and user trust

  • Explain confidentiality, integrity, and availability (CIA)
  • Distinguish assets, threats, vulnerabilities, likelihood, impact, and risk
  • Understand preventive, detective, and corrective controls
  • Use a simple risk register to record priority and rationale

  • Understand permission, scope, rules of engagement, and acceptable use
  • Use only supplied labs, owned systems, or explicitly authorized environments
  • Protect credentials, personal data, logs, and evidence during exercises
  • Recognize when to stop testing and escalate a concern

  • Create an inventory of assets for a fictional organization
  • Identify plausible risks without testing real external systems
  • Record assumptions, impact, and recommended safeguards
  • Explain the legal and ethical boundaries of the proposed exercise

Module Learning Objective

Build the systems knowledge needed to understand security events and apply basic defensive configuration. Use operating-system tools to inspect systems in a controlled lab and explain how users, files, processes, services, and permissions affect security.

  • Understand hardware, operating systems, processes, memory, and storage at a practical level
  • Explain client-server communication and virtualization concepts
  • Distinguish local, on-premises, cloud, and hybrid environments
  • Identify where security controls can be applied across a system

  • Explore users, groups, processes, services, and system settings
  • Understand basic Windows permissions and account types
  • Locate common system and authentication logs
  • Recognize updates, endpoint protection, and secure configuration practices

  • Navigate directories and inspect files using the Linux shell
  • Understand users, groups, ownership, permissions, and sudo
  • Inspect running processes and services using standard commands
  • Recognize logs, package updates, and basic host-hardening practices

  • Use basic Bash and PowerShell commands to inspect a lab machine
  • Collect system, user, process, and network configuration details
  • Distinguish routine activity from findings that require investigation
  • Record commands and observations so another learner can reproduce them

  • Document the initial configuration of a supplied lab system
  • Identify weak settings from a prepared checklist
  • Recommend proportionate hardening actions
  • Compare the initial and improved state with evidence

Module Learning Objective

Explain how devices and web services communicate, interpret common network protocols, and use safe sample traffic to understand network evidence. These concepts provide the foundation for later security monitoring and investigation.

  • Understand the purpose of the TCP/IP and OSI models
  • Explain IPv4 addresses, subnets, gateways, and basic routing
  • Recognize common ports and protocols such as DNS, DHCP, SSH, HTTP, and HTTPS
  • Understand how segmentation reduces unnecessary exposure

  • Explain DNS lookup and how names resolve to addresses
  • Understand DHCP, NAT, routing, and common network boundaries
  • Distinguish TCP and UDP at an introductory level
  • Recognize how firewalls and VPNs fit into network design

  • Trace a browser request through DNS, HTTP, and a web server
  • Understand HTTPS, TLS certificates, and encrypted transport at a conceptual level
  • Read request and response metadata using provided examples
  • Recognize cookies, sessions, and common sources of web security risk

  • Read basic packet fields using sample captures in Wireshark
  • Identify expected versus unusual protocol patterns in prepared examples
  • Understand metadata visibility and the limits of packet inspection
  • Handle captures responsibly and avoid collecting unrelated private traffic

  • Diagram a simple client, server, DNS, and network boundary flow
  • Explain which protocols are expected for a sample scenario
  • Annotate sample traffic with relevant observations
  • Recommend where monitoring or a control would add value

Module Learning Objective

Apply core security principles to identity, access, data protection, and layered controls. Learn how configuration and control choices reduce risk and how to justify those choices using the needs of a realistic organization.

  • Distinguish identification, authentication, and authorization
  • Understand multi-factor authentication and common identity risks
  • Apply least privilege, role-based access, and separation of duties
  • Review account lifecycle, service accounts, and access reviews

  • Compare firewalls, endpoint protection, EDR, IDS, and IPS at a high level
  • Understand secure configuration baselines and timely patching
  • Recognize layered controls and why no single control is sufficient
  • Map a common risk to preventive and detective safeguards

  • Distinguish encryption, hashing, and digital signatures
  • Understand symmetric and asymmetric encryption conceptually
  • Recognize certificates, public-key infrastructure, and key-handling needs
  • Connect data classification to encryption, access, and retention decisions

  • Understand backup, recovery, and business continuity purposes
  • Explore the value of protected, tested, and appropriately separated backups
  • Understand recovery objectives at an introductory level
  • Recognize how preparation reduces the impact of ransomware and outages

  • Choose suitable controls for a fictional set of assets and risks
  • Explain how identity, endpoint, network, and data controls work together
  • Identify residual risk after the controls are applied
  • Document the reasoning and evidence for each recommendation

Module Learning Objective

Recognize common attack patterns, assess vulnerability information, and recommend practical defensive remediation. Practice with intentionally vulnerable or simulated systems supplied for learning, not with public targets or systems without explicit authorization.

  • Recognize phishing, social engineering, credential misuse, malware, and denial-of-service concepts
  • Understand how weak configurations and exposed services increase risk
  • Distinguish a threat event, a vulnerability, an exploit, and an impact
  • Discuss how layered controls and user reporting help reduce exposure

  • Recognize common web application risk categories using OWASP guidance
  • Understand input validation, authentication, session management, and access-control failures
  • Review secure error handling, dependency updates, and secret management
  • Use provided examples to identify risk and propose defensive fixes

  • Understand vulnerability advisories, severity scores, and asset context
  • Prioritize findings by exploitability, exposure, business impact, and available fixes
  • Distinguish vulnerability scanning from penetration testing and their authorization requirements
  • Track finding status, remediation owner, and verification evidence

  • Apply a guided checklist to a sandbox operating system or web service
  • Review unnecessary services, default accounts, permissions, and update status
  • Understand secure defaults, configuration drift, and change control
  • Verify that defensive changes work and do not disrupt required functionality

  • Review a pre-scoped lab report and sample vulnerability findings
  • Separate confirmed evidence from assumptions and false positives
  • Create a remediation plan ordered by risk and feasibility
  • Recheck the affected configuration after a controlled remediation

  • Prioritize a set of simulated findings for a fictional organization
  • Propose mitigation, responsible owner, and target timeframe
  • Explain residual risk and any compensating control
  • Submit a concise report with evidence and validation steps

Module Learning Objective

Build a beginner-level defensive monitoring workflow by understanding logs, alerts, indicators, and detection tools. Investigate prepared datasets and simulated alerts, document findings, and distinguish suspicious signals from confirmed incidents.

  • Identify common authentication, operating-system, endpoint, firewall, and web logs
  • Understand timestamps, event fields, event sources, and retention
  • Correlate a small number of related events using a timeline
  • Recognize missing context and the risk of drawing unsupported conclusions

  • Understand how a SIEM collects, normalizes, searches, and correlates events
  • Interpret a sample dashboard and a predefined alert rule
  • Prioritize alerts using severity, affected asset, and available context
  • Document disposition, evidence, confidence, and escalation needs

  • Recognize indicators of compromise and their limitations
  • Compare suspicious login, unusual process, and unexpected network activity examples
  • Understand signatures, thresholds, baselines, and false positives
  • Explain why one indicator rarely proves a security incident on its own

  • Review provided packet captures and network telemetry
  • Compare expected traffic with a prepared suspicious scenario
  • Connect network observations with related endpoint or authentication events
  • Write a concise investigation timeline from the available evidence

  • Review a synthetic alert and supporting log samples
  • Classify the case as expected activity, suspicious activity, or requiring escalation
  • List supporting evidence, uncertainty, and next investigative steps
  • Prepare a concise ticket suitable for handoff to another analyst

Module Learning Objective

Practice a structured response to a simulated security event, understand basic governance and risk responsibilities, and use introductory scripting or queries to reduce repetitive work. Keep all activities limited to synthetic datasets and authorized training environments.

  • Understand preparation, detection, analysis, containment, eradication, recovery, and lessons learned
  • Differentiate incident facts, hypotheses, impact, and severity
  • Recognize when to preserve evidence and escalate to a qualified responder
  • Use a simple playbook to structure decisions and record actions

  • Understand security policy, standard, procedure, and control at a practical level
  • Use the NIST Cybersecurity Framework as a way to organize security outcomes
  • Recognize governance, privacy, compliance, and third-party considerations
  • Communicate risk in terms of business impact and feasible mitigation

  • Read a small Python script that parses a synthetic log file
  • Use basic filtering and simple SQL queries to find relevant records in sample data
  • Understand repeatability, error handling, and the need to validate automated output
  • Avoid embedding passwords, tokens, or sensitive information in scripts and logs

  • Walk through a fictional incident scenario using a defined playbook
  • Create an event timeline and record containment recommendations
  • Draft a clear internal escalation or stakeholder update
  • Capture lessons learned and prioritized control improvements

Module Learning Objective

Combine the program’s foundational skills in a scoped, defensive project. Review a fictional organization or supplied lab, assess a small set of risks, investigate synthetic evidence, recommend proportionate controls, and communicate findings with professional care.

  • Choose from an instructor-provided scenario or lab environment
  • Define scope, allowed actions, exclusions, and success criteria
  • Inventory assets and identify plausible threats and weaknesses
  • Create a small risk register and test plan before starting work

  • Review a prepared system, network, identity, or configuration baseline
  • Compare current settings with the program’s defensive checklists
  • Prioritize improvements using impact, feasibility, and available evidence
  • Record assumptions and avoid making claims beyond the scope

  • Analyze synthetic logs, alerts, or provided network captures
  • Build a timeline and classify evidence with stated confidence
  • Recommend triage, escalation, and safe containment actions
  • Keep an auditable record of observations and analytical choices

  • Document immediate actions and longer-term prevention
  • Identify owners, verification steps, and residual risk
  • Describe how changes will be tested and monitored
  • Include communication and recovery considerations

  • Present the scope, method, evidence, findings, and recommendations
  • Explain limitations, ethical boundaries, and what remains uncertain
  • Organize sanitized project files and a clear README for a portfolio
  • Reflect on next steps such as SOC analysis, cloud security, governance, or penetration testing in authorized labs

HOW YOU'LL LEARN

Understand the Risk. Defend with Evidence.

Learn through guided explanations, controlled security labs, prepared log and network evidence, milestone reviews, and a final project. Exercises are limited to environments you own or are explicitly authorized to use, with an emphasis on responsible analysis, clear documentation, and practical defensive decisions.

01

Understand

Learn how systems, networks, identities, and security controls work-and why a threat or vulnerability matters in context.

02

Practice

Work with supplied lab systems, synthetic logs, sample packet captures, security checklists, and simulated incident scenarios with feedback at key checkpoints.

03

Apply

Present a defensive project that connects the scope, observations, evidence, recommended controls, response steps, and remaining limitations.

Practice responsibly. Protect what matters. Communicate with clarity.

PROGRAM INFORMATION

Build a Responsible Cyber Security Foundation.

A structured program for learners who want to understand how systems are protected, how suspicious activity is investigated, and how security recommendations are supported by evidence. The learning structure combines guided study with practical work in authorized, controlled environments.

01

Learning Commitment

Follow a paced learning plan with time to understand concepts, practise in a controlled environment, and review your work.

  • 48 learning sessions
  • 3 hours per session
  • 144 total learning hours
  • Guided learning and practice
02

Core Security Skills

Build a foundation across the systems, controls, and processes used in defensive security work.

  • Operating systems and networking
  • Identity and access controls
  • Threat and vulnerability awareness
  • Security monitoring fundamentals
03

Practical Milestones

Track progress through checkpoints that validate foundational understanding before moving to the next stage.

  • Guided, authorized lab exercises
  • Progress checks across key modules
  • Evidence-based findings and notes
  • Final defensive security project
04

Your Next Step

Use your project and feedback to identify strengths and choose an appropriate direction for continued learning.

  • Review evidence and recommendations
  • Document ethical boundaries and limitations
  • Organize sanitized project artifacts
  • Explore a suitable next specialization

FREQUENTLY ASKED QUESTIONS

Before You Start Your Cyber Security Journey.

Learn more about the program structure, foundational skills, practice environment, project work, and the responsible use of security tools.

Still have questions?

Let's discuss your goals and whether this learning path fits your current experience.

Talk to Our Team
How long is the program?

The proposed structure consists of 48 sessions, with 3 hours per session, for a total of 144 learning hours.

The curriculum progresses from security principles and systems fundamentals to networking, controls, monitoring, incident response, and a defensive final project.

Do I need prior cybersecurity experience?

The curriculum starts with introductory security concepts, computer systems, operating systems, and networking. Prior professional cybersecurity experience is not assumed.

Comfort using a computer and a willingness to practice technical problem-solving will help. The team can discuss your readiness before enrollment.

Which tools and technologies will I explore?

Depending on the learning activity, the program introduces Windows and Linux command-line tools, network concepts, Wireshark with provided sample captures, SIEM concepts, security logs, and introductory Python or SQL for synthetic security data.

Tools are introduced when learners have the foundation needed to understand their purpose and interpret their output.

Explore the curriculum

Will the program include penetration testing?

The program introduces common attack patterns and vulnerability concepts so learners can better understand and reduce risk. Its main emphasis is on foundational and defensive security practice.

Any practical testing is limited to instructor-scoped labs, supplied vulnerable environments, systems you own, or systems for which explicit authorization has been granted. Testing public or third-party systems without permission is not part of the program.

What will I work on during the program?

Exercises may include creating a system baseline, mapping a network flow, reviewing simulated vulnerability findings, triaging synthetic security alerts, and completing an incident-response tabletop.

The final project brings these skills together in a scoped defensive review with documented evidence, recommendations, and clear limitations.

Which career direction does this program support?

The program is designed to build foundational knowledge that can support further study in areas such as security operations (SOC), cybersecurity analysis, IT support with security responsibilities, governance and risk, or authorized penetration testing.

It does not guarantee employment or replace the deeper practice, experience, and specialist preparation required for a specific role.

How is learning progress evaluated?

Progress is assessed through guided exercises, milestone checkpoints, system and network reviews, investigation notes, and the final project presentation.

Learners are expected to explain their evidence, reasoning, uncertainty, and ethical boundaries-not only produce a tool output.

YOUR NEXT STEP STARTS HERE

Ready to Build Your Cyber Security Foundation?

Develop the knowledge to understand security risks, review defensive controls, and investigate simulated security events through structured practice. Talk to our team to discuss your goals and the next step in your learning journey.

Talk to Our Team