Implementing Security Controls

What you will be able to do

• Design an identity and access management setup with multi-factor authentication (MFA) and single sign-on (SSO).
• Apply least privilege using role-based access control and a privileged access management workflow.
• Configure encryption for data in transit and at rest, and explain the trade-offs of each cipher choice.
• Stand up a small public key infrastructure, issue and revoke certificates, and manage keys through their full lifecycle.
• Harden endpoints and deploy endpoint detection and response (EDR) in line with a recognized benchmark.
• Segment a network and write firewall rules that reflect zero trust principles.
• Build a centralized logging pipeline that feeds a security information and event management (SIEM) platform.
• Write SIEM detection rules that map to the MITRE ATT&CK framework and cut down on false alarms.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   Identity and Access Management

   Identity is the first thing an attacker probes and the first layer you will build. You will set up strong authentication with multi-factor authentication and single sign-on, then control what each account is allowed to do. The module closes with least privilege and a privileged access management routine that stands up to a real audit.

   2 lessons · 5 quiz questions

2. 02

   Encryption and Public Key Infrastructure

   With access under control, you turn to protecting the data itself. You will apply encryption to data in transit and at rest, and learn how to pick algorithms and key lengths without guessing. Then you will build a small public key infrastructure, issue and revoke certificates, and manage keys safely from creation to retirement.

   2 lessons · 5 quiz questions · assignment

3. 03

   Endpoint and Network Controls

   Now you defend the machines and the paths between them. You will harden endpoints, roll out endpoint detection and response, and measure your work against a trusted benchmark. Then you will shape the network with segmentation, firewall rules, and zero trust ideas so that one compromised host does not become a company-wide incident.

   2 lessons · 5 quiz questions

4. 04

   Centralized Logging and SIEM

   Every control you have built produces signals, and this module makes those signals useful. First you will design a centralized logging pipeline that collects events from identity systems, endpoints, and the network, then normalizes and stores them in one place. Next you will feed a security information and event management platform, write detection rules, map alerts to attacker techniques, and tune the rules so your team sees real threats instead of noise.

   2 lessons · 5 quiz questions · assignment