The CIA Triad — Confidentiality, Integrity, and Availability — is the foundational model that defines the three core objectives of every information security program. You will learn what each principle means in practice, how real-world attacks violate one or more of them, and how security controls are designed to protect each property. Every security decision you make as a professional will ultimately trace back to these three principles.

Understanding who is attacking you and how they operate is essential for building effective defenses. You will learn the taxonomy of threat actors — from script kiddies to nation-state APTs — and the attack vectors they use to compromise systems. Threat modeling begins with understanding your adversaries, and this lesson gives you the vocabulary and framework to do that.

Security frameworks provide structured approaches to building, managing, and improving an organization's cybersecurity posture. You will learn the NIST Cybersecurity Framework, ISO 27001, and SOC 2, understanding how each is used and in what contexts. Familiarity with these frameworks is essential for security professionals working in enterprise environments or pursuing compliance-related roles.

The cybersecurity industry offers a wide range of career paths, from hands-on technical roles to strategic and management positions. You will learn the major specializations — offensive security, defensive security, cloud security, GRC, and more — along with the certifications, skills, and experience needed to break into each. This lesson helps you map your interests and strengths to a concrete career direction.

The final assessment tests your understanding of core cybersecurity concepts, threat landscape knowledge, and framework familiarity. You will demonstrate your ability to analyze security scenarios, apply the CIA Triad, identify threat actors and their TTPs, and recommend appropriate controls from established frameworks. This assessment validates your readiness to pursue more advanced courses in the academy.