Everyday computing, information and assets
Start with a service people need, then identify the information, technology, people and providers that make it possible.
Confidentiality, integrity, availability, privacy and AAA
Separate what security protects from how identity, permission and activity records help protect it.
Networks, layers, addresses, names and ports
Follow communication using layers, names, addresses and ports without confusing their functions.
Governance, controls, frameworks and policies
Understand how direction, accountability, risk decisions, obligations and controls fit together.
Professional conduct, due care and due diligence
Make professional judgments within your competence and the evidence available.
Risk concepts, scenarios, assessment and treatment
Describe a credible risk scenario before choosing a score, method or response.
Awareness, social engineering and security culture
Help people act securely through usable processes, verification, reporting and a learning culture.
Business continuity, disaster recovery and recovery objectives
Use business priorities to decide what must recover, how soon and with how much recoverable data.
Measures, metrics, risk indicators and management reporting
Measure the question you need to answer and report enough context for a useful decision.
Practice, feedback and a fictional learning portfolio
Use retrieval, scenarios and feedback, then connect fictional work into a coherent portfolio.
What this path still needs
- This is an entry route, not complete IT training or an exam-readiness assessment.
- Continue through the CC path for access, networks, cloud, operations and the five AI applications.