Free to read ยท Three levels
Cybersecurity: defensive foundations and risk decisions
A complete bilingual defensive course covering identity, data, configuration, detection, incident response, recovery, and accountable security verification.
Start learningIn this course
Learn cybersecurity through the assets, people, decisions, and dependencies of a fictional learning portal. Basic lessons connect risk, authentication, maintenance, network boundaries, and data protection. Intermediate lessons develop authorization, web defenses, configuration review, vulnerability prioritization, logging, and incident triage.
Advanced lessons connect threat models, cryptographic claims, recovery evidence, incident coordination, software verification, and governance. Every lesson provides developed explanations, contextual examples, cause-and-fix analysis, worked exercises, takeaways, and official sources. Exercises use invented records and harmless local calculations rather than testing real accounts or systems.
What you will learn
- Describe assets, plausible harm, trust boundaries, ownership, and residual risk.
- Distinguish authentication, authorization, transport, integrity, authenticity, and recovery claims.
- Plan evidence-based maintenance, detection, triage, and approved response.
- Review requirements, dependencies, exceptions, and metrics without claiming certainty from a checklist.
Your learning path
Three levels
Basic: defensive concepts and personal-service boundaries
Build a concrete model of assets, identity, maintenance, network trust, and protected data.
- Assets, threats, and security risk
- Identity, authentication, and account lifecycle
- Passwords, MFA, passkeys, and recovery
- Device configuration, updates, and maintenance
- Network and web trust boundaries
- Data protection, retention, and backups
Intermediate: operational defensive reasoning
Review access, web boundaries, configuration, vulnerability evidence, logging, and incident triage.
- Authorization and least privilege
- Web application defensive boundaries
- Secure configuration and controlled change
- Vulnerability evidence and remediation priorities
- Logging, detection, and trustworthy triage
- Incident triage and authorized response
Advanced: architecture, recovery, and governance
Connect security requirements to key lifecycle, recovery exercises, incident evidence, supply-chain verification, and accountable improvement.
- Threat modeling and security architecture
- Cryptography and the key lifecycle
- Resilience and recovery testing
- Incident coordination and evidence
- Security verification and the software supply chain
- Governance, metrics, and continuous improvement
Who this is for
- Learners seeking a structured introduction to defensive cybersecurity.
- Developers and service maintainers learning to connect controls with evidence and accountable decisions.
Before you start
- Basic computer, file, and web familiarity.
- Ability to read small JSON and Python examples; no security tools, administrator access, cloud account, or real credentials are required.