General Cybersecurity
Core security concepts for anyone building or operating software — from the CIA triad and IAM to networks, crypto, app risks, incidents, and zero trust. Build a practical mental model of cybersecurity without drowning in jargon.
Level: Intermediate · Category: Cybersecurity · Estimated time: 5 hours
Lessons
- CIA Triad & Security Mindset — Confidentiality, integrity, and availability; threats, vulnerabilities, and risk; defense in depth.
- Identity & Access Management (IAM) — Authentication vs authorization, accounts and roles, least privilege, MFA, and session basics.
- Network Security Fundamentals — Firewalls, segmentation, VPNs, TLS, DNS security basics, and common network attacks at a high level.
- Cryptography Basics — Symmetric vs asymmetric crypto, hashing, digital signatures, PKI intuition, and key management overview.
- Application Security & OWASP Top 10 — Secure SDLC overview, common web flaws, and how the OWASP Top 10 prioritizes application risk.
- Incident Response Lifecycle — Preparation, detection, containment, eradication, recovery, and lessons learned aligned with NIST-style handling.
- Introduction to Zero Trust — Why perimeter-only trust fails; verify explicitly, least privilege access, and assume breach.
Topics covered
cybersecurity, cia-triad, iam, network-security, cryptography, owasp, incident-response, zero-trust