Cybersecurity Foundation Program. Ethical hacking, defence and digital forensics.

What SOC, penetration testing, GRC, application security and cloud security teams each do.

Topics covered

• Security operations (SOC) and penetration testing: what the work involves
• Governance, risk and compliance (GRC) roles
• Application security (AppSec) and cloud security
• Choosing a path to focus on during the course

You produce: a map of security career paths and the one you will aim for.

The stages of an ethical hack, practised in guided labs with Kali Linux and Metasploit.

Topics covered

• Rules of engagement: authorisation and scope before any test
• Reconnaissance and scanning a target network
• Enumeration and exploitation with Kali Linux and Metasploit
• Post-exploitation, and writing up what you found

You produce: a documented walkthrough of a guided ethical hacking lab.

How networks are attacked and defended, from a TCP/IP review to firewalls and VPNs.

Topics covered

• TCP/IP review: ports, protocols and packets
• Firewalls and VPNs: how they protect a network
• Common network attacks and how to defend against them
• Reading network traffic with Wireshark

You produce: a network traffic analysis in Wireshark.

The OWASP Top 10, tested hands-on against deliberately vulnerable apps, and the secure coding that prevents them.

Topics covered

• The OWASP Top 10 web application risks
• Testing deliberately vulnerable apps with Burp Suite
• Injection, broken access control and other common flaws
• Secure coding practices that prevent them

You produce: a vulnerability report on a practice web app.

How AI systems are attacked: prompt injection, jailbreaks and the other risks in the OWASP LLM Top 10.

Topics covered

• The OWASP LLM Top 10 risks for AI applications
• Prompt injection: direct and indirect attacks
• Jailbreaks and other AI-specific attack classes
• Defending AI apps: input handling, output checks and access limits

You produce: an AI risk checklist for an LLM-based app.

How a security operations centre works: SIEM tools, alert triage and first steps in incident response.

Topics covered

• What happens in a security operations centre (SOC)
• Working with SIEM tools: logs, rules and alerts
• Triaging alerts: true positives, false positives and escalation
• Incident response basics: contain, investigate and report

You produce: a triaged SOC alert with an incident note.

Handle digital evidence correctly, use basic forensic tools and document a case.

Topics covered

• Evidence handling and chain of custody
• Basic forensic tools for disks, files and logs
• Building a timeline of what happened
• Documenting a forensics case clearly

You produce: a documented digital forensics case.

The standards and laws security teams work to: ISO 27001, SOC 2 and India's DPDP Act.

Topics covered

• ISO 27001: what an information security management system is
• SOC 2 reports and why clients ask for them
• India's Digital Personal Data Protection (DPDP) Act: key duties
• How GRC teams turn standards into everyday controls

You produce: a short compliance brief on ISO 27001, SOC 2 and DPDP.

Plan your certification path and present your lab work the way security hiring managers expect.

Topics covered

• Planning a certification path after the course
• What security hiring managers look for
• Turning your lab write-ups into résumé and LinkedIn entries
• Preparing for technical and scenario-based interviews

You produce: a security résumé and a certification plan.

Complete and document three guided labs: ethical hacking, digital forensics and SOC alert triage.

Topics covered

• A guided ethical hacking lab, documented step by step
• A digital forensics case, from evidence to findings
• A SOC alert triage scenario, with your decisions explained

You produce: three documented lab reports.