Cyber security protects the confidentiality, integrity and availability of information — and every certification (Security+, CySA+, PenTest+, CASP+) and every cyber role builds on the same core principles. Learn them once here and reuse them across the whole Academy, your interviews and your career.
Defence in Depth
Layered controls so a single failure never becomes a breach.
Tap or hover a part to learn more.
The human layer.
Security policies, acceptable-use rules and user-awareness training. Most breaches start with a person, so this outer layer is critical.
Check your understanding
1. Why is defence in depth more effective than a single strong control?
2. User-awareness training belongs to which layer?
What this path covers
- Security Principles — CIA triad, defence in depth and zero trust.
- Risk Management & Governance — assessing and treating risk, policy and frameworks.
- Threat Actors & Threat Intelligence — who attacks, why, and how we track them.
- Malware & Endpoint Security — malware types and modern endpoint defence.
- Network Security — firewalls, segmentation and secure design.
- Identity & Access Management — authentication, authorisation and least privilege.
- Authentication, PKI & Cryptography — protecting data with encryption and trust.
- Vulnerability Management — finding, prioritising and fixing weaknesses.
- Security Operations (SOC) — monitoring, detection and triage.
- Incident Response — the lifecycle from detection to lessons learned.
- Social Engineering & Human Risk — phishing and the human attack surface.
- Security Architecture — layering controls into a resilient design.
Where this fits
Pair this with Networking Fundamentals, Windows Fundamentals and Linux Fundamentals, progress into CompTIA Security+, then rehearse with AI Interview™ and evidence it in your Career Passport™.
Start with Security Principles.