Cybersecurity · Syllabus Breakdown

Cybersecurity Course Syllabus: Full Curriculum Breakdown

SECTION 01Foundation modules: networking and systems

Every cybersecurity professional starts with the same foundation. Without a solid understanding of how networks and systems work, you cannot defend them or attack them ethically.

Networking fundamentals:

• OSI and TCP/IP models: The layered architecture of networks and how data flows through each layer.
• IP addressing and subnetting: IPv4, IPv6, CIDR notation, and network segmentation.
• Core protocols: DNS, DHCP, HTTP/HTTPS, FTP, SSH, and SMTP.
• Routing and switching: How packets travel across networks and how switches manage local traffic.

Operating systems:

• Linux: Command line, file permissions, users and groups, process management, and package managers.
• Windows: Active Directory, Group Policy, Windows security features, and event logs.
• Virtualization: Setting up VMs with VirtualBox or VMware for safe practice.

Security fundamentals:

• CIA triad: Confidentiality, Integrity, and Availability.
• Authentication and authorization: Passwords, MFA, RBAC, and least privilege.
• Cryptography basics: Symmetric and asymmetric encryption, hashing, and digital certificates.

SECTION 02Offensive security: ethical hacking and pen testing

Offensive security teaches you to think like an attacker so you can find vulnerabilities before malicious actors do.

Reconnaissance and scanning:

• Passive recon: OSINT, WHOIS, DNS enumeration, and social media intelligence.
• Active scanning: Nmap, masscan, and vulnerability scanners like Nessus and OpenVAS.

Exploitation:

• Metasploit framework: Modules, payloads, and post-exploitation.
• Web application attacks: OWASP Top 10 — SQL injection, XSS, CSRF, and broken authentication.
• Network attacks: Man-in-the-middle, ARP spoofing, and password attacks with John the Ripper and Hashcat.
• Privilege escalation: Linux and Windows escalation techniques.

Web application security:

• Burp Suite: Intercepting proxies, scanning, and manual testing.
• SQLmap: Automated SQL injection detection and exploitation.
• OWASP ZAP: Open-source web application security scanner.

SECTION 03Defensive security: SOC and incident response

Defensive security — often called blue team — focuses on detecting, responding to, and recovering from security incidents.

SOC operations:

• SIEM tools: Splunk, ELK Stack, and IBM QRadar for log aggregation and correlation.
• Log analysis: Windows Event Logs, Syslog, and application logs.
• Alert triage: Prioritizing and investigating security alerts based on severity.

Incident response:

• IR lifecycle: Preparation, identification, containment, eradication, recovery, and lessons learned.
• Forensics basics: Disk imaging, memory analysis, and chain of custody.
• Malware analysis: Static and dynamic analysis in sandboxes.

Threat intelligence and hunting:

• MITRE ATT&CK framework: Mapping adversary tactics and techniques.
• Threat hunting: Proactively searching for threats that evade automated detection.
• Vulnerability management: Scanning, prioritizing, and remediating vulnerabilities.

SECTION 04Governance, risk, and compliance

Governance, Risk, and Compliance (GRC) ensures that security practices align with business objectives and regulatory requirements.

Risk management:

• Risk assessment: Identifying, analyzing, and evaluating risks.
• Risk treatment: Mitigation, transfer, acceptance, and avoidance.
• Business continuity: Disaster recovery planning and business impact analysis.

Compliance frameworks:

• ISO 27001: International standard for information security management systems.
• GDPR: European data protection regulation.
• HIPAA: Healthcare data protection in the US.
• PCI DSS: Payment card industry data security standard.

Security policies and awareness:

• Policy development: Writing and enforcing security policies.
• Security awareness training: Educating employees on phishing, social engineering, and safe practices.

SECTION 05Certifications mapped to the syllabus

A good cybersecurity course aligns its modules with industry certifications so you can validate your skills.

Entry-level certifications:

• CompTIA Security+: Foundational security concepts. Aligns with the foundation modules.
• CompTIA Network+: Networking fundamentals. Aligns with the networking module.
• Certified Ethical Hacker (CEH): Offensive security concepts. Aligns with the offensive module.

Intermediate certifications:

• OSCP: Hands-on penetration testing. Aligns with advanced offensive modules.
• CompTIA CySA+: Security analytics and SOC operations. Aligns with defensive modules.
• Certified Information Systems Auditor (CISA): Auditing and governance. Aligns with GRC modules.

Advanced certifications:

• CISSP: Management-level security certification.
• GPEN: GIAC Penetration Tester for advanced offensive roles.

SECTION 06Hands-on labs and capstone projects

Theory alone won't make you job-ready. A strong syllabus includes extensive hands-on labs and at least one capstone project.

Lab environments:

• Home lab setup: VirtualBox or VMware with Kali Linux and vulnerable VMs like Metasploitable.
• Cloud labs: AWS, Azure, or GCP environments for practicing cloud security.
• CTF platforms: Hack The Box, TryHackMe, and PentesterLab.

Capstone project examples:

• Full penetration test: Recon to report on a vulnerable target machine.
• SOC simulation: Build a SIEM dashboard and triage alerts from simulated attacks.
• Security policy framework: Develop a complete GRC framework for a fictional organization.

What to look for in a course:

• Lab access: Cloud-based labs or detailed home lab instructions.
• Mentorship: Instructor feedback on your projects and reports.
• Portfolio output: Projects you can showcase on GitHub or your resume.

SECTION 07Test yourself — cybersecurity syllabus

SECTION 08Frequently asked questions

SECTION 09Related reads