1. Basics – How Internet Works:

Basic networking, IP, TCP, DNS, HTTP, HTTPS, WLAN, LAN, Intranet, Extranet, Web Domains

2. Basics – App Architectures

Client-Server, 3 Layer Architecture, Web Apps, Mobile Apps, APIs, Operating Systems

3. Basic security concepts

Authentication and Authorization, Roles, Passwords, Security policies, Secure vs, Unsecure

4. Layers of security in organizations

Physical Security, Hardware security, Platform Security, Application Security, Antivirus, Firewall

5. Web security assurance 

Certificates, Digital Signatures, Multifactor-Authentication, Password Management Tools

6. CIA Triad –  What we secure?

Confidentiality, Integrity and Availability, Study Case – Cloud Security Layers

7. How do we secure?

Technical mechanisms: firewalls, antivirus, monitoring, Public key infrastructure, encryption, VPN, … Non-technical and pro-active mechanisms: audits, certifications, contracts and NDAs, training, awareness, risk assessment – basic probabilities

8. Cyber threats

DOS, DDOS, Data Destruction – Ransomware, Impersonation attacks – phsishing, Smishing etc – social engineering, data theft

9. Mitigation and incident response strategy

Data breach reports and incidents reports, minimize the impact strategies

10. Privacy and data confidentiality

Cookies, tracking, spam versus non-spam, GDPR consent, data retention

11. Industry specific workshop

Fintech, MedTech, Business Continuity plan, Business Availability, SLAS

12. Security testing 

The OWASP Security Testing Guidelines  Whitehat and pentesting principles

13. Overview of OWASP and CloudSecurity Alliance

 OWASP Top Ten, Cloud Security Alliance Documentation, NIST documentation overview