Types: Administrative, Technical, Physical

Control Categories: Preventive, Detective, Corrective, Deterrent, Compensating

Frameworks: NIST, ISO 27001, CIS Controls, COBIT, PCI DSS

Regulatory requirements and standards mapping

Cryptographic Algorithms: Symmetric, Asymmetric, Hashing

Key Management, Key Exchange (Diffie-Hellman, RSA)

Digital Signatures and Certificates

Certificate Authorities (CA) & Public Key Infrastructure (PKI)

Encryption types: At rest, In transit, End-to-End

Threat Actors: Script Kiddies, Hacktivists, Nation States, Insiders

Types of Attacks: Phishing, MITM, DDoS, Social Engineering, Credential Stuffing

Tactics, Techniques, and Procedures (TTPs)

Software Vulnerabilities (Buffer Overflows, Race Conditions, SQL Injection)

Patch Management and Secure Coding

CVE & CVSS scoring

Exploit Kits and Zero-Day Exploits

Mitigation: Patching, Input Validation, Firewalls

IOC Examples: IPs, Hashes, URLs, Registry Keys

Malware Types: Trojans, Worms, Ransomware, Adware

Behaviour-based detection

Sandboxing and heuristic analysis

Network Zones (DMZ, Intranet, Extranet)

Network Segmentation & VLANs

Secure Network Design Principles

Proxy, NAT, Load Balancers, VPNs

Cloud Service Models (IaaS, PaaS, SaaS)

Shared Responsibility Model

Virtualization Security Concerns

Zero Trust Architecture: Principles, Implementation

High Availability (HA), Load Balancing

Redundancy: RAID, Clustering

Business Continuity Planning (BCP) & Disaster Recovery (DRP)

Fault Tolerance and Failover Systems

Firewalls (Stateful vs Stateless)

IDS/IPS, NIPS/NIDS

Network Access Control (NAC)

Port Security, Switch Hardening, ACLs

Endpoint Protection Platforms (EPP), EDR solutions

MDM/MAM (Mobile Device/Application Management)

BYOD policies and enforcement

Secure Configuration (Baseline, Hardening)

User Access Models: RBAC, ABAC, MAC, DAC

Identity Federation and SSO

Directory Services (LDAP, AD)

Provisioning and De-provisioning

Authentication Methods: Passwords, Biometrics, MFA

Authorization Protocols: OAuth, SAML, RADIUS

Accounting/Logging Best Practices

AAA in VPNs and Network Devices

SOC Roles and Responsibilities

Log Management and SIEM

Use Cases and Alert Tuning

Anomaly vs Signature-Based Detection

SOAR Platforms

Playbooks and Runbooks

IR Phases: Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned

Real-time Alerting and Automated Response

Chain of Custody Principles

Data Acquisition Methods (Live vs Static)

Volatile Data Collection (RAM, Logs)

Preservation and Analysis of Artifacts

GRC Overview and Principles

Risk Management Lifecycle

Compliance Standards: HIPAA, GDPR, SOX, FISMA

Security Policies and Audit Logs

Vendor Due Diligence & Onboarding

Third-party Audit Reports (SOC 2, ISO 27001)

SLAs and Security Requirements

Data Sharing and Access Control

Phishing Simulations

Role-Based Training

Continuous Education Programs

Gamification and Engagement Strategies

Types: Acceptable Use, Access Control, Data Classification, Incident Response

Policy Creation Process

Periodic Review and Updates

Communication and Enforcement Mechanisms