English Cybersecurity - Cybersecurity in Plain English

Identity, Access & Authentication

• Authentication protocols (LDAP, Kerberos, SAML, OAuth2)

• Identity and Access Management (IAM)

• Least privilege, role-based access control (RBAC)

• Federation and Single Sign-On (SSO)

Network Security – Deeper Dive

• Deeper look at ports, protocols, and services

• Intro to Wireshark for packet analysis

• Firewalls: rule sets, NAT, and deep packet inspection

• IDS/IPS vs. SIEM tools – what they do and how they differ

Vulnerabilities, Exploits & Patch Management

• CVE, CVSS, and vulnerability scoring

• Exploit techniques (buffer overflows, privilege escalation)

• Patch management process in enterprise environments

• Virtual patching & compensating controls

Threat Actor Evolution

• Threat Actor Types:

• Script kiddies, criminal organizations, hacktivists, insiders

• Nation-state actors (APT groups) – motivations and tactics

• Case studies of evolving threats:

• From basic phishing → sophisticated s... more

Incident Response and Reporting

• Recognizing signs of compromise

• Steps in incident response (identify, contain, eradicate, recover)

• Role of users in reporting

• Legal and compliance considerations

Security in the Workplace

• Acceptable Use Policies (AUP), InfoSec Program and sub policies

• Device management (BYOD vs. corporate devices)

• Physical security (access control, secure areas)

• Security awareness culture

Data Protection and Privacy

• Encryption (at rest/in transit)

• Backups and data recovery

• Secure file sharing and disposal

• Privacy regulations (GDPR, HIPAA, etc.)

Basic networking: IP, DNS, ports, protocols

Firewalls and intrusion detection/prevention (IDS/IPS)

Network segmentation and zero trust principles

VPNs and secure remote access