This module introduces foundational security concepts, including the CIA triad, key terminologies, and ethical frameworks. It also explores how cybersecurity, information security, and information assurance interrelate, along with practical approaches like bug bounty programs and vulnerability management. Learners will gain a comprehensive understanding of security principles and their real-world applications.

This module provides an in-depth exploration of cyber threats, covering threat actors, advanced persistent threats, malware, and web application vulnerabilities. Learners will gain an understanding of defensive strategies, threat intelligence, and how to protect against various cyber attacks.

This module covers the distinctions between security and privacy, key privacy regulations, and major federal laws impacting cybersecurity. It also explores intellectual property rights, security standards, and methods for assessing organizational maturity in information security.

This module explores the fundamental concepts of security controls, including their types, implementation, and strategic use in protecting organizational systems. Learners will gain an understanding of defense in depth, abstraction, and compensating controls to strengthen security frameworks.

This module explores the key elements of security governance, including the roles of a security manager, organizational structure, security programs, and the relationship between governance and management. It covers the development and implementation of security policies, standards, and procedures, and emphasizes alignment with business goals. Learners will gain a comprehensive understanding of how to establish effective information security governance frameworks.

This module provides a comprehensive overview of risk management concepts, frameworks, and practices essential for security professionals. Learners will explore how to identify, analyze, evaluate, and respond to risks within organizational systems. The content also covers the importance of continuous monitoring and reporting in maintaining effective risk governance.

This module explores the fundamental aspects of data security, including the data lifecycle, secure disposal methods, digital rights management, and data security controls. Learners will gain an understanding of how to manage and protect data throughout its entire lifecycle while ensuring compliance with security standards.

This module covers the critical aspects of managing and protecting IT assets, including the risks of shadow IT, strategies for effective asset tracking, and the use of role-based accountability frameworks. Learners will gain an understanding of how to identify, manage, and secure organizational assets through structured processes and clear role definitions.

This module explores key aspects of personnel and vendor security, including social engineering prevention, security awareness programs, due care and diligence, outsourcing risks, supply chain management, and real-world case studies. Learners will gain practical insights into implementing security measures and managing human-related risks in organizations.