Cyber Security
Cyber Security Fundamentals
The CIA triad, authentication, phishing, firewalls, Zero Trust and the language of risk.
- 14 notes
- 96 minutes of reading
- What is cyber security? Assets, threats, impact and careersA plain introduction to cyber security today: what it protects, the threats it faces, what incidents really cost an organisation, and the main roles and career paths in the field. 7 min · Beginner
- Threat actors and their motivesWho attacks organisations and why: cyber criminals, nation states, hacktivists, insiders and low-skill attackers, with their typical methods and how knowing them shapes your defences. 7 min · Beginner
- Attack surface and attack vectors: how breaches startWhat an attack surface is, the common attack vectors used to breach organisations, and practical ways to find and shrink your exposure. 7 min · Beginner
- Types of security control and defence in depthHow security controls are classified by purpose (preventive, detective, corrective) and by type (administrative, technical, physical), and how layering them builds defence in depth. 7 min · Beginner
- Security frameworks: NIST CSF 2.0, ISO/IEC 27001 and CIS ControlsWhat security frameworks are for, the six functions of NIST CSF 2.0, how ISO/IEC 27001:2022 and the CIS Controls differ, and how to choose and combine them. 8 min · Intermediate
- PKI and digital certificates: CAs, chains of trust and TLSHow public key infrastructure works: certificate authorities, chains of trust, what is inside a TLS certificate, validation types, revocation, short lifetimes and automated renewal. 9 min · Intermediate
- Cybersecurity basics: the CIA triadThe three goals behind every security decision (confidentiality, integrity and availability) with everyday examples. 4 min · Basics
- Strong passwords and multi-factor authenticationHow to create passwords that are easy to remember and hard to crack, why password managers help, and why MFA matters most. 5 min · Basics
- Phishing: how to spot fake emails and messagesThe warning signs of phishing emails, texts and calls, and exactly what to do if you clicked something. 5 min · Basics
- Zero Trust in plain wordsWhat Zero Trust really means, how it differs from the old perimeter model, and practical first steps for any organisation. 7 min · Intermediate
- The areas of cyber security: network, endpoint, cloud, identity and moreA tour of the main areas of cyber security, from network and endpoint security to identity, application, data, cloud, OT and physical security, and how they fit together in one programme. 7 min · Beginner
- Common types of cyber attack and how to defend against eachAn overview of the attack types you meet most often, including malware, phishing, credential attacks, denial of service, interception, injection, supply chain attacks and insider misuse, with the main defence for each. 8 min · Beginner
- Cyber hygiene: the essential controls for people and small organisationsThe everyday security habits and basic technical controls that stop most common attacks, using the UK Cyber Essentials scheme as a checklist, with advice for individuals and small organisations. 7 min · Beginner
- Cyber resilience: planning to keep running when attacks succeedWhat cyber resilience means, how it differs from cyber security, and the practical building blocks: critical service mapping, recovery objectives, immutable backups, business continuity plans and exercises. 8 min · Intermediate