ECF-GSF Core study plan

ECF-GSF Core · Give each week a clear focus.

8 weeks · About 6 hours per week

Week 1

Security Fundamentals and Risk Management

Define the CIA triad and give two concrete examples of each component in an enterprise context
Explain quantitative risk concepts (asset value, exposure factor, SLE, ALE) and calculate a worked example
Distinguish qualitative from quantitative risk assessment and list when each is appropriate
Identify the main threat categories and map them to corresponding control types (preventive, detective, corrective)

A one-page risk register with five identified risks, each scored qualitatively and with an ALE calculation for at least two

Week 2

Compare security frameworks (ISO 27001, NIST CSF, CIS Controls) and describe their scope and structure
Explain defense-in-depth and map layers (perimeter, network, host, application, data) to specific controls
Describe common network attacks (spoofing, MITM, DDoS, ARP poisoning) and matching mitigations
Summarize the OSI and TCP/IP models and identify security controls at each layer

A layered defense-in-depth diagram with at least three controls per layer and a short attack-to-control mapping table

Week 3

Configure and explain network segmentation using VLANs and subnets, including the role of a DMZ
Compare stateful inspection, proxy, and next-generation firewalls and select the right type for given scenarios
Describe VPN technologies (IPsec, TLS) and when to use site-to-site versus remote access
Explain wireless security protocols (WPA2/WPA3, 802.1X) and common wireless threats

A network security architecture diagram for a small enterprise with segmented zones, firewall placement, and a VPN design

Week 4

Differentiate authentication factors and apply multi-factor authentication to realistic scenarios
Explain identity lifecycle management: provisioning, deprovisioning, access reviews, and privileged access management
Compare access control models (DAC, MAC, RBAC, ABAC) and choose the appropriate model for given requirements
Describe federated identity concepts (SAML, OAuth 2.0, OpenID Connect) and the role of an identity provider

An identity and access management design document covering authentication, authorization, and lifecycle processes for a 200-user organization

Week 5

Explain symmetric and asymmetric encryption, key exchange, and the role of a PKI and digital certificates
Select appropriate cryptographic algorithms and key lengths for data at rest and in transit
Describe data protection concepts: classification, DLP, masking, tokenization, and secure deletion
Identify privacy principles (data minimization, consent, retention) and map them to common regulations

A data protection matrix listing five data types with classification, encryption method, retention period, and privacy handling requirements

Week 6

Compare endpoint protection approaches (EDR, antivirus, application allowlisting) and their operational tradeoffs
Explain secure application development practices (input validation, secure coding, SAST/DAST) and the OWASP Top 10 categories
Describe cloud shared responsibility, identity management in cloud, and common cloud misconfigurations
Evaluate container and serverless security considerations, including image scanning and least privilege

A cloud and endpoint security checklist with at least 15 actionable controls mapped to the shared responsibility model

Week 7

Describe log sources and SIEM correlation use cases, and explain the purpose of a SOC
Outline the incident response lifecycle (preparation, detection, containment, eradication, recovery, lessons learned) and apply it to a scenario
Explain digital forensics fundamentals: evidence handling, chain of custody, and order of volatility
Define key operational metrics (MTTD, MTTR) and describe how to measure and improve them

An incident response runbook for a ransomware scenario with roles, communication steps, and containment actions

Week 8

Map common legal and regulatory obligations (GDPR, breach notification, data protection) to security program requirements
Explain the purpose and components of security policies, standards, procedures, and guidelines
Describe audit, compliance, and third-party risk management processes
Integrate all domains by completing a full-length practice assessment and analyzing weak areas

A governance one-pager covering policy hierarchy, regulatory mapping, and a personal remediation plan based on practice test results

Week 2: Score at least 70% on a 30-question quiz covering domains 1 and 2

Week 4: Complete a timed 40-question mixed set on domains 1, 2, and 3 with a score of 75% or higher

Week 6: Produce a written summary of domains 4 and 5 key concepts and pass a 20-question quiz at 80%

Week 8: Achieve 80% or higher on a full-length 100-question practice exam and document a remediation plan for missed topics