Skip to main content
LEARNING PATH / CYBERSECURITY

Cybersecurity Foundations.

From protecting an asset to recognizing, investigating and responding to threats.

A complete five-phase foundation in defensive cybersecurity: understand risk and trust boundaries; recognize attacks; apply layered controls; investigate log evidence and triage alerts; respond, verify recovery and hand off. Twelve Learn → Practice pairs culminate in an integrated, six-system Northstar capstone Lab. Work through the five phases at your own pace, then test your skills in the final applied Lab.

26 learning milestonesBeginner → Intermediate · applied capstoneNo account required
YOUR LEARNING JOURNEY

Follow the steps. Build the skill.

You can open any step at any time. Mark activities complete when you're satisfied you've learned or practiced them—there are no locked lessons.

FIVE GUIDED PHASES

Follow the prerequisite order, or jump into any phase. Completed milestones stay saved even when you switch phases.

01 / Understand Security

Learn what needs protection, why threat and risk statements matter, and how identity and trust boundaries constrain access.

LearnSTEP 1 OF 26

Threats, Vulnerabilities & Risk

Begin with the CIA triad, assets, threat sources/events, exposures, weaknesses, exploitation paths, likelihood, impact, control choices and a testable risk statement. Explore four fictional risk scenarios.

YOU'LL BE ABLE TOExplain what is at risk, why it matters and what evidence and control decisions belong in a risk assessment.
PracticeSTEP 2 OF 26

Threats, Vulnerabilities & Risk · Independent Practice

16 recall cards, 16 explained security questions and four three-decision investigations requiring careful interpretation of evidence and risk.

YOU'LL BE ABLE TOIndependently distinguish observed facts from hypotheses, classify security weaknesses and select proportional, testable actions.
LearnSTEP 3 OF 26

Security Principles & Trust Boundaries

Understand authentication versus authorization, least privilege, roles, default deny, trust boundaries, Zero Trust, sessions, emergency access and verification. Investigate four fictional access policies.

YOU'LL BE ABLE TOExplain why a requester is allowed or denied a specific resource action and verify all required policy gates.
PracticeSTEP 4 OF 26

Security Principles & Trust Boundaries · Independent Practice

16 access-control recall cards, 16 explained questions and four incidents with twelve resource-level authorization decisions.

YOU'LL BE ABLE TOEvaluate identity, sign-in, scoped permissions, approval and negative validation in independent security cases.
UP NEXT / PHASE 0202 / Understand Attacks
Keep learning at your own pace.

Revisit any resource as often as you need. Completion is a personal reminder, not an exam score or verified certificate.

Explore the full Lesson Library →
CYBERSECURITY FOUNDATIONS / GUIDED LEARNING MAP

Five connected phases. One complete security foundation.

Explore the course at a glance. Each phase connects guided lessons with hands-on Practice, and the final phase brings everything together in an applied Northstar incident Lab.

PHASE 01COMPLETE / READY TO EXPLORE

Understand Security

CIA triad, assets, threat events, vulnerabilities, exposures, risk and control decisions.

PHASE CONTENTThreats, Vulnerabilities & Risk — Learn + PracticeSecurity Principles & Trust Boundaries — Learn + Practice
PHASE 02COMPLETE / READY TO EXPLORE

Understand Attacks

Social engineering, phishing, malware, credential abuse and how an attack path develops.

PHASE CONTENTPhishing & Social Engineering — Learn + PracticeMalware & Credential Threats — Learn + Practice
PHASE 03COMPLETE / READY TO EXPLORE

Build Defenses

Layered endpoint and network defenses, phishing-resistant identity controls, protected data flows, basic cryptography and recovery.

PHASE CONTENTDefense in Depth — Learn + PracticeEndpoint & Network Protection — Learn + PracticeIdentity & MFA Protection — Learn + PracticeData Protection & Cryptography — Learn + PracticeOptional deep dive: Encryption & PKI Fundamentals ↗
PHASE 04COMPLETE / READY TO EXPLORE

Detect Problems

Read events across systems and prioritize a mixed security queue based on observed outcomes, impact, active exposure, source coverage and authorized handoff.

PHASE CONTENTSecurity Evidence & Logs — Learn + PracticeDetection & Alert Triage — Learn + Practice
PHASE 05COMPLETE / READY TO EXPLORE

Respond & Recover

Investigate, contain and recover under authorization; verify access, data and monitoring; complete the full six-system Northstar capstone and evidence-led handoff.

PHASE CONTENTIncident Response Fundamentals — Learn + PracticeRecovery & Investigation Handoff — Learn + PracticeFinal Capstone: The Northstar After-Hours Incident — briefing + applied Lab

Follow the milestones above in order, or revisit any phase. Your optional completion marks are saved only in this browser; Labs activities can be marked complete after you finish them.