Path 10: Cybersecurity Fundamentals — KashSec Academy

CIA triad, risk, malware, hashing, phishing, MFA, frameworks. 20 free lessons, beginner→intermediate level, starting with "The CIA triad"

Level: Beginner→Intermediate · 20 lessons · Free, no account needed.

Lessons in this path

  1. The CIA triad — Confidentiality, Integrity, Availability — the field's core.
  2. Defense in depth — Why no single control is ever enough, and how this course itself mirrors the principle.
  3. Threats, vulns & risk — The unlocked-door analogy and the risk equation.
  4. Types of security controls — Preventive/detective/corrective/deterrent, and technical/administrative/physical.
  5. Vulnerability Management Basics — CVE, CVSS, and why score alone doesn't determine real priority.
  6. Attackers & the kill chain — Who attacks and the phases of an intrusion.
  7. Insider Threats — Malicious, negligent, and compromised insiders — and why they're hard to detect.
  8. Malware families — Virus, worm, trojan, ransomware, rootkit, spyware.
  9. Supply Chain Security Basics — Why a trusted vendor relationship is itself an attack surface.
  10. Passwords & hashing — How they should be stored, why reuse is a disaster.
  11. Phishing & social eng. — Attacking humans, not computers.
  12. Security Policies & Awareness Training — Why a policy on paper isn't the same as security in practice.
  13. MFA, updates, backups — Habits that stop most real attacks.
  14. Incident Response Basics — The six-phase lifecycle behind 'isolate first, investigate second.'
  15. Business Continuity & Disaster Recovery — RTO, RPO, and backups at organizational scale.
  16. Physical Security Basics — Why physical access defeats most digital controls, and what tailgating exploits.
  17. Frameworks & compliance — NIST, ISO, OWASP, MITRE, PCI DSS, HIPAA, GDPR.
  18. Security Metrics & KPIs — MTTD, MTTR, and why measuring the wrong thing can be actively misleading.
  19. Risk Assessment Lab — Practice thinking like a risk analyst.
  20. Social Engineering Lab — Understand how attackers manipulate people.