Threats, Vulnerabilities & Risk
Begin with the CIA triad, assets, threat sources/events, exposures, weaknesses, exploitation paths, likelihood, impact, control choices and a testable risk statement. Explore four fictional risk scenarios.
From protecting an asset to recognizing, investigating and responding to threats.
A complete five-phase foundation in defensive cybersecurity: understand risk and trust boundaries; recognize attacks; apply layered controls; investigate log evidence and triage alerts; respond, verify recovery and hand off. Twelve Learn → Practice pairs culminate in an integrated, six-system Northstar capstone Lab. Work through the five phases at your own pace, then test your skills in the final applied Lab.
You can open any step at any time. Mark activities complete when you're satisfied you've learned or practiced them—there are no locked lessons.
Begin with the CIA triad, assets, threat sources/events, exposures, weaknesses, exploitation paths, likelihood, impact, control choices and a testable risk statement. Explore four fictional risk scenarios.
16 recall cards, 16 explained security questions and four three-decision investigations requiring careful interpretation of evidence and risk.
Understand authentication versus authorization, least privilege, roles, default deny, trust boundaries, Zero Trust, sessions, emergency access and verification. Investigate four fictional access policies.
16 access-control recall cards, 16 explained questions and four incidents with twelve resource-level authorization decisions.
Revisit any resource as often as you need. Completion is a personal reminder, not an exam score or verified certificate.
Explore the full Lesson Library →Explore the course at a glance. Each phase connects guided lessons with hands-on Practice, and the final phase brings everything together in an applied Northstar incident Lab.
CIA triad, assets, threat events, vulnerabilities, exposures, risk and control decisions.
Social engineering, phishing, malware, credential abuse and how an attack path develops.
Layered endpoint and network defenses, phishing-resistant identity controls, protected data flows, basic cryptography and recovery.
Read events across systems and prioritize a mixed security queue based on observed outcomes, impact, active exposure, source coverage and authorized handoff.
Investigate, contain and recover under authorization; verify access, data and monitoring; complete the full six-system Northstar capstone and evidence-led handoff.
Follow the milestones above in order, or revisit any phase. Your optional completion marks are saved only in this browser; Labs activities can be marked complete after you finish them.