The program, module by module

1. IT Security Fundamentals

   Apply the CIA triad — confidentiality, integrity, availability — and core risk vocabulary to assess what actually threatens an organization.

2. Network Security

   Secure a Wi-Fi network and inspect its traffic with Wireshark to see concretely what a firewall, VPN and IDS/IPS actually protect.

3. Systems Security and Hardening

   Harden a workstation — separate accounts, least privilege, updates, MFA, 3-2-1 backups — to actually shrink its attack surface.

4. Introduction to Ethical Penetration Testing

   Run a penetration test in a legal Docker lab — reconnaissance, scanning, exploitation, reporting — under a strict authorization framework.

5. Incident Management and Response

   Build a five-phase incident response procedure — detection, containment, eradication, remediation, lessons learned — and communicate without lying or downplaying.

6. Legal Framework and Compliance

   Apply realistic compliance basics for a small organization — data minimization, clear disclosure, proportionate security, handling requests — without legal jargon.

7. Web Application Security (OWASP Top 10)

   Reproduce and fix SQL injection, XSS and broken access control on a local lab to learn the OWASP Top 10 hands-on.

8. Final Project and Certification

   Scope, run and write up a complete security audit — network, system, application — ranked by risk, like a real consulting engagement.

9. Professional Integration and Certification

   Certification

   Cross-cutting module: résumé/CV, LinkedIn, interview practice, and activating the alumni network. Triggers generation of the final certificate.

How certification works

Three levels, from simplest to most demanding. Each one only claims what it actually verifies.

The distinction is added to your certificate of achievement — it never replaces it: nothing off-platform ever blocks the certificate itself.