- Overview of Cyber Security Concepts
- Types of Cyber Threats (Malware, Ransomware, Phishing, etc.)
- Cybersecurity Frameworks and Standards (NIST, ISO 27001)
- The Role of Cyber Security in Organizations
- Key Cyber Security Terminology (Vulnerabilities, Risks, Threats)
- Understanding Networking Basics (IP, DNS, TCP/IP)
- Network Security Devices: Firewalls, Routers, and Switches
- Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)
- Secure Network Design and Segmentation
- Virtual Private Networks (VPNs) and Secure Communication Protocols
- Confidentiality, Integrity, and Availability (CIA Triad)
- Risk Management Processes (Assessment, Mitigation, Response)
- Types of Security Controls (Preventive, Detective, Corrective)
- Security Policies and Standards (ISO, NIST)
- Security Audits and Compliance Requirements (SOX, GDPR)
- Basics of Cryptography: Symmetric vs Asymmetric Encryption
- Public Key Infrastructure (PKI) and Digital Certificates
- Common Cryptographic Algorithms (AES, RSA, ECC)
- Digital Signatures and Certificates
- Hashing Algorithms and Their Applications (SHA, MD5)
- Common Web Application Vulnerabilities (SQL Injection, XSS)
- OWASP Top 10: Key Vulnerabilities and Mitigation
- Secure Software Development Lifecycle (SSDLC)
- Web Application Firewalls (WAF) and Their Role
- Authentication and Session Management Best Practices
- Phases of Penetration Testing: Reconnaissance, Scanning, Exploitation
- Vulnerability Scanning and Risk Assessment
- Tools for Ethical Hacking: Nmap, Metasploit, Burp Suite
- Social Engineering Attacks and Mitigation
- Writing Penetration Testing Reports and Documentation
- Incident Response Lifecycle: Identification, Containment, Eradication
- Incident Response Plans and Team Structure
- Forensic Analysis of Cyber Incidents
- Collecting and Preserving Digital Evidence
- Using SIEM (Security Information and Event Management) for Monitoring
- Understanding Cloud Computing Models (IaaS, PaaS, SaaS)
- Security Challenges in the Cloud: Data Breaches, Misconfigurations
- Shared Responsibility Model in Cloud Security
- Cloud Security Best Practices (Encryption, Access Control)
- Securing Cloud Platforms: AWS, Microsoft Azure, Google Cloud
- Authentication Mechanisms: Passwords, Biometric, 2FA, MFA
- Role-Based Access Control (RBAC) vs. Attribute-Based Access Control (ABAC)
- Single Sign-On (SSO) and Federation
- Privileged Access Management (PAM)
- Identity and Access Management Solutions (Okta, Azure AD)
- Overview of Data Protection Laws (GDPR, HIPAA, PCI-DSS)
- Cybersecurity Compliance Frameworks (NIST, CIS Controls)
- Data Privacy Regulations and Their Implications
- Legal Requirements for Incident Reporting and Data Breach Notifications
- Understanding Cyber Liability Insurance and Legal Risks