CYBER LIBRARY
Explore the bootcamp
← All learning paths
SEE THE BIGGER PICTURE

Make security work for the business

Move from risk decisions to recovery and measurable delivery. Follow the sequence or open any note that catches your interest.

10 connected notes30 min reading
01
MILESTONE 1 OF 3

Understand the risk

0/3 read
  1. 01
    Risk & resilience · 3 min

    Asset inventories

    Know what exists, who owns it, and why it matters.

  2. 02
    Risk & resilience · 3 min

    Risk assessment

    Estimate plausible harm in context and explain the assumptions.

  3. 03
    Risk & resilience · 3 min

    Risk treatment

    Choose a response and verify what risk remains.

02
MILESTONE 2 OF 3

Prepare for disruption

0/3 read
  1. 04
    Risk & resilience · 3 min

    NIST Cybersecurity Framework

    Use outcome-oriented functions to organize risk management conversations.

  2. 05
    Risk & resilience · 3 min

    Business impact analysis

    Learn what disruption does to the organization and which services matter first.

  3. 06
    Risk & resilience · 3 min

    Business continuity

    Keep critical activities functioning through disruption.

03
MILESTONE 3 OF 3

Deliver & improve

0/4 read
  1. 07
    Risk & resilience · 3 min

    Disaster recovery

    Restore technical services in a tested sequence with trustworthy data.

  2. 08
    Making change happen · 3 min

    Project charters

    Establish why the project exists and who can direct it.

  3. 09
    Making change happen · 3 min

    Change control

    Evaluate a proposed change before it alters scope or a running service.

  4. 10
    Making change happen · 3 min

    Lessons learned

    Turn experience into a specific improvement with an owner.

Keep connecting the dots.

Follow another path or take your next question into the library.

Find your next direction
Start with a concept. Follow its connections.
Detection & responseAbuse Elevation Control MechanismElevation-control abuse bypasses or misuses mechanisms governing privileged execution.Making change happenAcceptance criteriaDefine observable conditions for a deliverable to be accepted.Security essentialsAccess controlUnderstand subjects, resources, permissions, and enforcement through a shared-drive example, including how access changes over time.Detection & responseAccess Token ManipulationAccess token manipulation changes or adopts operating-system security contexts.Risk & resilienceAccount Access RemovalAccount access removal disrupts legitimate users by changing, deleting, or restricting their identities.Evidence & investigationAccount DiscoveryAccount discovery enumerates identities available in a system or environment.Detection & responseAccount ManipulationAccount manipulation changes identity settings to preserve or expand access.Adversarial thinkingAcquire InfrastructureInfrastructure acquisition obtains domains, servers, or other resources used to support operations.Adversarial thinkingActive ScanningActive scanning probes target infrastructure to learn reachable services or weaknesses.Security essentialsAdversary in the middleAn intermediary may observe or alter a communication path.Security essentialsAESA symmetric block cipher whose safe use depends on its mode and implementation.Making change happenAgile deliveryUse short feedback cycles to adapt toward a useful outcome.
ESC to close Searches titles and note content