Govern
Security Foundations & GRC
CIA triad, risk management, frameworks and the controls that hold a security program together.
Data Security & Privacy
Data classification, DLP, encryption and key management, plus GDPR and India's DPDP Act.
Security Architecture & Zero Trust
Designing secure systems: trust boundaries, zero trust architecture, reference models and design reviews.
Protect
Identity & Access Management
Authentication, MFA, SSO, privileged access and the identity attacks defenders see most.
Cloud Security
Shared responsibility, cloud identity, misconfigurations, CSPM and workload protection on Azure, AWS and GCP.
Cryptography & PKI
Symmetric vs asymmetric crypto, hashing, TLS, certificates and the move to post-quantum.
Network Security
Protocols, segmentation, firewalls, IDS/IPS and how to read traffic like an analyst.
Detect & Respond
Security Operations & Incident Response
SIEM, detection engineering, triage, the IR lifecycle and writing a useful post-incident review.
Threat Intelligence & MITRE ATT&CK
Intelligence lifecycle, ATT&CK mapping, IOCs vs TTPs and turning news into defensive action.
Digital Forensics
Evidence handling, Windows and Linux artifacts, memory forensics and building timelines.
Endpoint Security & Malware Analysis
Hardening, EDR, forensics basics and safe static triage of suspicious files.
Build
Application Security
OWASP Top 10, secure SDLC, code review, SAST/DAST/SCA and software supply chain.
DevSecOps & Secure CI/CD
Building security into pipelines: secrets, scanning gates, IaC security, signed artifacts and SLSA.
Mobile & Endpoint Device Security
iOS and Android security models, MDM, app security (OWASP MASVS) and mobile threats.
People
Social Engineering & Security Awareness
How people are manipulated, how to spot it, and how to build a security culture that works.
Security Awareness for Employees
Short, practical training every employee needs: data handling, phishing, remote work, AI at work and reporting incidents.
Cyber Safety for Students
Age-appropriate online safety: strong passwords, spotting scams, privacy, kindness online and where to get help.
Emerging
AI & LLM Security
Prompt injection, agent security, model supply chain and governance for AI systems.
OT, ICS & IoT Security
Purdue model, ICS protocols, IEC 62443 zones and conduits, and securing connected devices.
Ethical Hacking & Pentesting
Rules of engagement, methodology and reporting for authorized testing in lab environments.
Career paths
- All-Staff Awareness Programme: Annual compliance-ready training for every employee. (Evidence for ISO 27001 A.6.3 / PCI DSS 12.6)
- School Cyber Safety: Online safety and digital citizenship for students aged 10–17. (Digital citizenship certificate)
- University Cyber Foundations: A first-year course across the core disciplines. (Security+ preparation)
- SOC Analyst: Detect and respond to threats in a security operations center. (Security+ → CySA+ → BTL1/GCIH)
- Cloud Security Engineer: Secure Azure, AWS and GCP workloads and identities. (AZ-500 → CCSP)
- Penetration Tester: Run authorized assessments and write fix-focused reports. (PenTest+ → OSCP)
- GRC & Security Manager: Lead risk, compliance and security programs. (CISSP → CISM → ISO 27001 LA)
- OT Security Specialist: Protect plants, utilities and critical infrastructure. (GICSP → ISA/IEC 62443)
- AI Security Engineer: Secure LLM apps, agents and the AI supply chain. (OWASP LLM / NIST AI RMF)
- Security Architect: Design secure systems and zero trust programs. (CISSP-ISSAP → SABSA)
- Incident Responder & Forensics: Investigate breaches and preserve evidence. (GCIH → GCFA)