Assessing security posture - You will learn how to assess an organization's IT security posture using clear criteria and standards, helping you identify weak points faster and set meaningful protection priorities.
Building security rules - You will learn how to organize IT security processes, define procedures, and shape a security policy, so you can implement consistent rules more effectively in your environment.
Securing data transmission - You will understand practical uses of SSH, PGP, SSL, and TLS, allowing you to choose better ways to protect data in transit and clearly see where each mechanism fits in daily work.
Protecting wireless networks - You will understand major wireless network threats and how to reduce them, which will help you configure WiFi access more safely and spot settings that create unnecessary risk.
Finding network weaknesses - You will master the basics of network mapping, port scanning, and operating system detection, so you can identify exposed services and potential attack paths more efficiently.
Safer remote connectivity - You will learn the differences between SSL VPN and IPsec VPN, enabling you to select better remote access solutions and improve security for users, teams, and branch offices.
Stronger system protection - You will learn how to protect logs and what to review in web application security and identity management, so you can reduce abuse more effectively and limit unauthorized access.
Readiness for outages - You will learn how to plan data backups, emergency actions, and continuity tests, helping you prepare for incidents better and shorten recovery time for critical business services.
IT security is framed here through its main objectives, threat landscape, and the role it plays in protecting systems and information. The section establishes a common vocabulary and context for the topics that follow, from technical safeguards to organizational security practices.
Assessing security requires measurable criteria rather than assumptions. The discussion covers standards, evaluation criteria, and how organizations determine and interpret safety levels, providing a basis for judging whether existing controls meet expected operational and regulatory requirements.
At the organizational level, effective protection depends on clearly defined processes and rules. This section links IT security processes, operational procedures, and formal security policy, showing how governance structures translate requirements into repeatable day-to-day security practice.
SSH, PGP, SSL, and TLS are presented as core mechanisms for securing data in transit. Attention is given to their roles in encryption, authentication, and integrity protection, along with the contexts in which each protocol or standard is applied within enterprise communication.
Wireless infrastructure introduces risks tied to radio transmission, client mobility, and shared access space. The section concentrates on protecting Wi-Fi environments, reducing unauthorized connections, and addressing configuration weaknesses that can expose internal traffic and network entry points.
Before systems can be secured, they need to be identified and understood. Here the training covers network mapping, port scanning, and operating system detection, showing how these activities reveal exposed services and host characteristics that matter in security assessment and hardening.
SSL VPN and IPsec VPN are examined as two common approaches to secure remote connectivity. The section compares their use in protecting communication channels, highlights deployment differences, and shows how encrypted tunnels support access to internal resources across untrusted networks.
Reliable logs are essential for incident analysis, compliance, and operational oversight. This part explains how to protect log data against unauthorized access, tampering, and loss, while preserving integrity, availability, and traceability needed for security monitoring and investigations.
Web applications often expose business data directly to users, partners, and public networks. The focus here is on typical security weaknesses in the application layer, secure handling of input and sessions, and measures that limit exploitation of vulnerable web components.
Identity and access management defines who can use which resources and under what conditions. The section connects multi-factor authentication, access control models, and password management practices to reduce unauthorized access and support consistent account security across the organization.
When an incident disrupts operations, recovery depends on more than restored files. This section addresses contingency planning, backup strategies, and the verification of business continuity plans through regular testing, so recovery procedures remain workable under real operational constraints.
Computer networking basics - You should understand how IP addresses, ports, network services, and basic host-to-host communication work, so you can comfortably follow topics related to scanning and VPNs.
Familiarity with IT systems - You should be familiar with the basics of operating systems, user accounts, and server services, so it is easier for you to analyze topics related to security and log protection.
Basics of web applications - You should know the basic building blocks of web applications, login flows, and browser-based data exchange, so you can better understand the protection mechanisms discussed.
General IT awareness - You should be comfortable in a typical IT environment and understand core technical terms, so you can fully benefit from topics covering identity, backups, and continuity planning.
