Search across lessons, applied guides, terminology and source readings.
Or choose a starting point.
Think in assets, objectives and risk
Build the language of security, connect it to decisions, and make claims that the evidence can support.
02People, resilience and useful evidence
Explore behaviour, disruption and measurement through a small fictional service.
03Control identity and access
Separate identity evidence from permissions, then follow access from joining to leaving.
04Connect systems safely
Understand names, addresses, trust boundaries, wireless systems and cloud responsibilities.
05Protect data and understand activity
Choose suitable protection, interpret records and use threat information without overstating what it proves.
06Respond, maintain, test and apply AI
Use evidence to respond and improve, then apply the same foundations to AI systems.
07Build an information security management system
Connect context, leadership, risk, support and operation in the selected ISO/IEC 27001:2022 route.
08Evaluate, improve and prepare
Learn audit and corrective-action reasoning, understand the two credential routes, and turn practice into feedback.