Google Cybersecurity study plan
Google Cybersecurity · Give each week a clear focus.
8 weeks · About 7 hours per week
Foundations of Cybersecurity & Assets, Threats, and Vulnerabilities
Explain the CIA triad and apply each principle to three realistic workplace scenarios
Classify ten organizational assets by sensitivity, owner, and data type using a written inventory
Differentiate at least six threat actor types and match each to a plausible motive and target
Compute likelihood-times-impact risk scores for five identified threats and rank them
Your checkpoint
A single document containing a 10-item asset inventory and a 5-threat risk register with scored, ranked entries
Play It Safe: Manage Security Risks & Assets, Threats, and Vulnerabilities
Map an organization's existing safeguards to the five NIST Cybersecurity Framework functions
Select and justify at least eight controls spanning administrative, technical, and physical categories
Outline a vulnerability management cycle from scan through remediation with target timeframes
Draft an incident response playbook for one scenario (phishing) covering detection, containment, and recovery
Your checkpoint
A control mapping table of 8+ controls tagged to CSF functions, plus a one-page phishing response playbook
Connect and Protect: Networks and Network Security
Trace a TCP/IP packet flow across the OSI layers for an HTTPS request
Compare stateful and stateless firewalls and place each correctly in a reference architecture
Build a firewall rule table of allow/deny entries for a small office with a DMZ, permitting only required ports
Explain how VPNs, forward proxies, and reverse proxies each protect a network perimeter
Your checkpoint
A labelled network diagram with a 12-rule firewall table, including a one-line justification for every rule
Connect and Protect: Networks and Network Security & Sound the Alarm: Detection and Response
Identify indicators of denial-of-service, on-path, and packet-sniffing attacks from written packet-capture summaries
Apply network hardening measures (port filtering, segmentation, access control) to a case scenario
Distinguish the customer and provider responsibilities across IaaS, PaaS, and SaaS
Describe how IDS/IPS, SIEM, and log ingestion chain together in a detection pipeline
Your checkpoint
A two-page hardening checklist for the week-3 network plus written triage notes on three sample alerts
Milestones
Week 2: Explain the CIA triad, the five CSF functions, and risk scoring from memory, and confirm the risk register and control mapping table are finished
Week 4: Trace a packet across OSI layers unaided and name the specific control that defeats DoS, on-path, and sniffing attacks
Week 6: Run 15 Linux commands and 10 SQL queries without reference material, and pass a self-quiz on file permissions and SQL joins
Week 8: Score 80% or higher on a timed 60-question practice exam and have two portfolio artifacts published