Cybersecurity Foundation study plan

Define the CIA triad and explain how each component applies to a real-world system

Differentiate between authentication, authorization, and accounting using concrete examples

Identify common threat actors and their motivations from a given scenario

Classify vulnerabilities, threats, and risks according to standard terminology

Compare symmetric and asymmetric encryption and describe typical use cases for each

Explain how hashing ensures integrity and list properties of secure hash functions

Outline the TLS handshake and the role of certificates in establishing trust

Recognize common cryptographic failures such as weak key management and improper random number generation

Categorize common network attacks (e.g., spoofing, man-in-the-middle, DDoS) by OSI layer

Describe the function of firewalls, IDS/IPS, and VPNs in network defense

Explain how segmentation and least privilege reduce attack surface

Identify indicators of compromise in network traffic logs

List the phases of incident response and the key activities in each

Differentiate between disaster recovery and business continuity planning

Explain the purpose of a business impact analysis and how it informs recovery objectives

Describe common backup strategies and their trade-offs

Define the components of a cybersecurity program (governance, risk management, compliance, operations)

Explain how to align security objectives with business goals using a framework such as NIST CSF

Identify key roles and responsibilities in a security organization

Describe the purpose of security policies, standards, and procedures

Conduct a qualitative risk assessment using a likelihood-impact matrix

Select appropriate risk treatment options (mitigate, transfer, avoid, accept) for given scenarios

Explain how to define and track risk appetite and tolerance

Describe the role of third-party risk management in a security program

Map common security controls to compliance requirements such as GDPR or ISO 27001

Explain the purpose and process of security audits and assessments

Describe how security awareness training and phishing simulations reduce human risk

Outline metrics and reporting mechanisms for communicating security posture to leadership

Synthesize concepts from both domains by analyzing a hypothetical security incident from detection to recovery

Evaluate the effectiveness of a security program using a maturity model

Review weak areas identified in practice quizzes and reinforce them

Practice time management by completing a full-length practice exam under timed conditions