Beginner

Information Security Fundamentals

The security mental models every technology professional should hold.

Programme Overview

A foundational programme covering the language, frameworks, and core practices of information security. Designed for IT staff, developers, and managers who need to embed security thinking into their day-to-day work without becoming full-time security practitioners.

What You'll Learn

Apply the CIA triad and defence-in-depth principles
Recognise common attack patterns and threat actors
Understand core controls across identity, endpoint, and network
Contribute meaningfully to incident response

Who It's For

IT and systems staff
Software developers
Managers responsible for security posture

Prerequisites

Basic IT literacy

Curriculum

- CIA triad, threat modelling basics
- Risk, threat, vulnerability
- Defence-in-depth
- Authentication vs. authorisation
- MFA, SSO, and modern identity
- Privileged access management
- Firewalls, IDS/IPS, and segmentation
- Endpoint protection and EDR
- Email and web security
- Logging, monitoring, and detection
- Incident response lifecycle
- Security awareness in practice