Cybersecurity Foundations

Opens the course with scope, objectives, and how the material is organized.

Provides a brief orientation to the role of standards and frameworks in shaping cybersecurity practice.

Summarises prerequisites and the baseline knowledge expected for learners beginning the course.

Explains attacker workflows and the stages commonly used to model intrusions.

Discusses preconditions and enabling activities that lead to cyber incidents.

Traces how modern cyber threats evolved and the forces driving current risk trends.

Examines botnets, monetization models, and how criminal ecosystems support attacks.

Describes techniques attackers use to hide payloads and evade detection mechanisms.

Covers process-based concealment techniques and indicators defenders can monitor.

Outlines how rootkits provide persistent control and the defensive challenges they pose.

Reviews social-engineering vectors and site‑based compromise techniques used to dupe targets.

Defines APT actors, their motivations, and how long‑term campaigns are conducted.

Explains ransomware tactics, business impact, and common attacker workflows.

Briefly describes illicit cryptomining and how it manifests on compromised systems.

Discusses hardware threats and separates real risks from exaggerated or misleading claims.

Introduces historical foundations that influenced modern security thinking and policy.

Explains the core functions and structure of the NIST CSF.

Covers practical steps and considerations when mapping controls to the NIST framework.

Defines risk terms and how to interpret likelihood and impact in a cybersecurity context.

Shows how to map threats to appropriate technical and organisational controls.

Covers how to document and communicate risk findings for stakeholders and compliance.

Introduces a more sophisticated model for contextualizing cyber risk across the enterprise.

Explains COBIT’s governance focus and how it complements technical controls.

Discusses applying COBIT practices to day‑to‑day security operations and accountability.

Offers a taxonomy of common controls used to reduce cyber risk.

Explores how control frameworks are structured and applied across environments.

Summarises widely accepted standards and the behaviours they encourage.

Discusses design principles and patterns used to reduce attack surface and improve manageability.

Covers approaches and considerations for securing payment card information and compliance drivers.

Looks at cloud-specific security trade-offs and common misconfigurations to watch for.

Addresses security patterns for internet-exposed devices and services.

Explores cost-effective measures and prioritisation for organisations with limited budgets.

Covers validation, testing, and metrics used to assess control effectiveness.

Discusses how security measures can support privacy objectives and regulatory compliance.

Introduces zero‑trust principles for access control and segmentation strategies.

Explores organisational resilience concepts and how they apply to cyber incidents.

Explains software bill of materials (SBOMs) and their role in managing third‑party risk.

Introduces principles, roles, and processes for handling security incidents.

Describes maturity models and metrics to evaluate incident-response capabilities.

Covers detection signals, telemetry sources, and practical monitoring approaches.

Introduces proactive threat-hunting concepts and simple techniques to find anomalies.

Outlines immediate response actions and coordination steps during an active incident.

Covers stakeholder communication, legal considerations, and notification best practices.

Introduces the intersection of AI systems and security concerns at a conceptual level.

Examines specific threats to and from AI, including data‑poisoning and misuse risks.

Describes practical constraints and controls to reduce AI-related operational risk.

Provides a brief overview of emerging standards for AI management and governance.

Discusses how geopolitical and cross-border issues shape cyber policy and practice.

Explains norms, voluntary agreements, and expectations that govern state behaviour in cyberspace.

Introduces international initiatives and organisations that support capacity building and best practice sharing.

Describes the Traffic Light Protocol as a mechanism for graded information sharing among stakeholders.

Suggests follow-up steps, further learning paths, and ways to apply the course material professionally.