Cybersecurity Fundamentals
Understand what needs protecting, who threatens it and the core ideas of defence.
Protect accounts, devices, networks and data: from safe everyday habits to web security, cryptography and incident response.
Understand what needs protecting, who threatens it and the core ideas of defence.
Protect accounts with strong passwords, password managers and multi-factor authentication.
Recognise manipulation tricks in email, messages and phone calls, and respond safely.
Learn how malware spreads and how to keep computers and phones clean and updated.
Secure home and office networks, Wi-Fi and remote connections.
Understand the most common web vulnerabilities and how developers prevent them.
See how encryption, hashing and digital signatures protect data.
Control the personal data you share and handle other peoples data responsibly.
Prepare for security incidents and follow a clear process to contain and recover.
Manage security in an organisation with risk assessment, policies and standards.
Protect phones and tablets from theft, malicious apps and unsafe networks.
Understand shared responsibility and the basics of keeping cloud accounts and data safe.
Configure privacy settings and avoid common social-media scams.
Secure smart home devices, cameras and other connected gadgets.
Learn the ethical hacking process used to find weaknesses before attackers do.
Preserve and analyse digital evidence after a security incident.
Write code that resists common vulnerabilities from the start.
Control who can access what, and how systems verify identity.
Plan backups and recovery so an incident does not become a lasting disaster.
Map the roles, skills and certifications that build a cybersecurity career.
Understand the risks of Wi-Fi and Bluetooth and how to configure them safely.
Track attacker groups, campaigns and indicators to anticipate threats.
Watch systems continuously and spot suspicious activity early.
Understand new risks introduced by AI systems and how to defend them.
Configure email safely and spot the technical signs of a spoofed message.
Assess the security risk that vendors and dependencies bring to an organisation.
Protect offices, devices and people from in-person security threats.
Bring security checks into the build and deployment pipeline.
See how attack simulation and defence teams work together to improve security.
Design systems that verify every request instead of trusting the network perimeter.
Browse the web with confidence by reading addresses, understanding HTTPS and handling pop-ups and downloads safely.
Lock down a smartphone with updates, screen locks, careful app choices and a plan for loss or theft.
Set up social media privacy and guide children and family members towards safer online habits.
Design and test a simple backup routine that survives device loss, mistakes and ransomware.
Shop and bank online while spotting fake stores, protecting card details and reacting quickly to fraud.
Harden a Linux or Windows computer using least-privilege accounts, permissions, updates and disk encryption.
Explain how modern sign-in works, including MFA, passkeys, SSO, SAML, OAuth 2.0 and OpenID Connect.
Secure Wi-Fi, Bluetooth and smart devices with segmentation, updates and sensible defaults.
Use cloud services safely by understanding shared responsibility, identity, encryption and common misconfigurations.
Explain how SPF, DKIM and DMARC work together to stop spoofed email from your domain.
Run a basic vulnerability management cycle: inventory, authorised scanning, prioritisation, patching and verification.
Map the main cybersecurity roles and build a realistic plan of skills, practice and certifications.
Model a system with data flow diagrams and STRIDE to find and rank design-level threats before they are built.
Describe how a SOC uses logs, a SIEM and playbooks to detect, triage and escalate security events.
Explain how authorised penetration tests are scoped, run and reported, and the legal and ethical limits.
Build security into every stage of development with requirements, reviews, automated testing and dependency control.
Plan how an organisation keeps critical services running and recovers data after outages, attacks or disasters.