Basics of Cybersecurity

Home < Courses < Basics of Cybersecurity

Basics of Cybersecurity

The ISAC Certified Basic Information Security (ICBIS) program is designed to equip students,
and professionals aspiring to start a technical career in cyber security.

OVERVIEW

The ISAC Certified Basic Information Security (ICBIS) program is designed to equip students, and professionals aspiring to start a technical career in cyber security. This is a foundation technical program that is considered essential to launch into the exciting world of Cyber Security. The course provides a foundational understanding of key concepts, principles, and practices in information security. Participants will explore fundamental topics such as confidentiality, integrity, availability, risk management, and cybersecurity best practices.

Course Objectives

Understand the fundamental principles and concepts of information security.
Identify common threats and vulnerabilities affecting information systems and assets.
Learn about risk management principles and techniques for assessing and mitigating security risks.
Gain proficiency in implementing basic security controls and best practices to protect information assets.
Explore the legal and regulatory frameworks governing information security and privacy.
Develop skills in incident detection, response, and reporting.
Understand the importance of security awareness and training in promoting a culture of security within organizations.
Learn cyber security basics practically with Cyberange Virtual Labs.

Course Outline

Unit 1: Introduction to Cyber Security and Information Security:

Definitions of Cyber Security and Information Security, Difference between CS & IS, Common terms used in CS, Cyber security structure in organization, Risk management.

Unit 2: Security Layers and Vulnerability:

7 layers of CS, Vulnerability types.

Unit 3: Attacks, Exploits and Preventive Methods:

Malware and its types, Attacks and Classification of attacks, How does exploits work, preventive methods against exploits.

Unit 4: Data Loss prevention Systems (DLP), Intrusion Detection System (IDS) and Intrusion Prevention System (IPS):

Definition, features and benefits of DLP, IDS & IPS, Key Differences, Integration and collaboration.

Unit 5: Honeypots:

Overview of honeypots, Purpose of honeypots, Types of honeypots.

Unit 6: Basics of Penetration Testing:

Definition and purpose of PT, Types of PT, PT Methodology, Reporting and Mediation, Continuous Testing & Improvement.

Unit 7: Threats and Threat Profiling:

Types of Threats/Actors, Threat Profiling, Advanced Persistent Threats, Reverse Engineering.

Unit 8: DevOps and DevSecOps:

DevOps vs DevSecOps, Advantages and Dis-advantages of Cloud, Types of Cloud computing services, Virtual computing.

Unit 9: Introduction to Internet of Things (IoT) & IoT Security:

Definition and concept of IoT, Key components of IoT, Applications and Use Cases, Challenges in IoT, Protect IoT Devices, Device Security (Data, Network)

Unit 10: Network Security:

Network Security – Encryption, Network Segmentation, Firewalls and IDS/IPS.

Unit 11: Mobile Security:

Mobile Device Security, Mobile Application Security, Mobile Device Firewall / VPNs, Data Security in Mobile, Secure communication, MFA, SSO, Mobile Identity Management.

Unit 12: Cyber Law, Ethics, and conflict resolution:

Key legal principles and concepts related to cybercrime, Compliance and Standards, Data protection and privacy law, International and National Laws.

Course Outcome

Understanding of Basic concepts in information and cyber security.
A practical view of the subjects covered with Cyberange Virtual Labs.
Knowledge of Industry-level cyber operations, laws, policies and frameworks.
Explain fundamental concepts such as confidentiality, integrity, and availability in the context of information security.
Identify common threats, vulnerabilities, and attack vectors targeting information systems and assets.
Apply risk management principles to assess security risks, prioritize mitigation efforts, and develop risk treatment plans.
Navigate legal and regulatory requirements related to information security and privacy, ensuring compliance with relevant laws and standards.
Ability to Identify and respond to security incidents.
Skills to assume entry-level positions in Security Operations like Cybersecurity analyst, Cybersecurity Engineer, Cybersecurity Consultant and many more.