

Golad Academy · Course syllabus
Cybersecurity
- Duration
- 12 weeks
- Skill level
- Beginner to Intermediate
- Next cohort
- 1 March 2027
- Course price
- £99
Overview
This cybersecurity course introduces the fundamentals of digital security, equipping learners with the knowledge to protect systems, networks, and data from evolving threats. Covering topics such as cyber attacks, ethical hacking, risk management, and best practices, the course builds practical skills essential for safeguarding digital environments in today’s interconnected world.
Format: Live online classes + GADLE
Learning outcomes
- Explain core security principles and frameworks (CIA triad, NIST CSF 2.0, ISO/IEC 27001)
- Secure networks, endpoints, identities and cloud resources
- Find and prioritise vulnerabilities, and apply hardening
- Triage alerts and respond to incidents using SIEM tools
- Apply governance, risk and compliance practices
- Model threats with STRIDE and MITRE ATT&CK
Curriculum
Module 1: Cybersecurity Fundamentals
- Introduction to Cybersecurity: Importance and Scope
- The CIA Triad: Confidentiality, Integrity, Availability
- Threat Landscape Overview: Malware, Ransomware, Phishing
- Security Frameworks: NIST, ISO 27001
Module 2: Network & Infrastructure Security
- Basics of Networking: TCP/IP, LAN/WAN, Routers, Switches
- Network Security Controls: Firewalls, IDS/IPS, VPNs
- Securing Servers, Endpoints, and Cloud Resources
- Network Monitoring and Traffic Analysis
Module 3: Identity & Access Management (IAM)
- Authentication vs Authorization
- Single Sign-On (SSO), Multi-Factor Authentication (MFA), and RBAC
- Implementing Least Privilege and Zero Trust Models
- Access Monitoring and Auditing
Module 4: Application & Cloud Security
- Secure SDLC and DevSecOps Principles
- OWASP Top 10 Vulnerabilities and Mitigation
- Cloud Security Fundamentals: AWS, Azure, GCP
- Secure API Development and Access Controls
Module 5: Vulnerability Management & Hardening
- Identifying Vulnerabilities: Scanning and Penetration Testing
- Patch Management Strategies
- System Hardening Best Practices
- Continuous Monitoring for Threats
Module 6: Cryptography Basics
- Symmetric and Asymmetric Encryption
- Public Key Infrastructure (PKI) and Certificates
- Hashing and Digital Signatures
- Implementing Secure Communication Channels (SSL/TLS)
Module 7: Incident Response & Forensics
- Incident Response Lifecycle: Preparation → Detection → Response → Recovery
- Collecting and Preserving Digital Evidence
- Log Analysis and SIEM Tools
- Forensic Investigation Techniques
Module 8: Governance, Risk & Compliance (GRC)
- Cybersecurity Policies and Governance Structures
- Risk Assessment and Mitigation Strategies
- Compliance Standards: GDPR, HIPAA, SOX
- Auditing and Reporting for Executive Management
Module 9: Secure Architecture & Threat Modeling
- Designing Secure Systems and Applications
- Threat Modeling Techniques: STRIDE, PASTA
- Using MITRE ATT&CK Framework for Threat Analysis
- Risk Mitigation and Secure Design Patterns
Module 10: Red/Blue/Purple Team Fundamentals
- Roles of Red (Offense) and Blue (Defense) Teams
- Simulated Attacks and Penetration Testing
- Defensive Strategies and Blue Team Operations
- Integrating Red/Blue into a Purple Team for Continuous Improvement
Module 11: Security Operations (SOC) & Threat Intelligence
- SOC roles, tiers and workflows
- SIEM use cases, alert triage and escalation
- Threat intelligence sources and indicators of compromise
- Security automation and playbooks (SOAR basics)
Module 12: Capstone Project & Career Workshop
- Capstone: Design a Full Cybersecurity Program
- Implement IAM, Vulnerability Management, and Incident Response Processes
- Create Security Dashboards and Reporting Templates
- Career Preparation: Resume, LinkedIn Profile, Interview Tips for Cybersecurity Roles
Industry-extension modules (optional, on GADLE)
- Cloud Security in Practice — The shared responsibility model; Cloud identity, keys and secrets management; Security posture management and common misconfigurations; Logging and monitoring in AWS and Azure
- AI and Emerging Threats — AI-powered phishing and deepfake social engineering; Securing AI systems: prompt injection and data leakage; Using AI to support detection and response; Ransomware resilience and recovery planning
Tools
Kali Linux, Nmap, Wireshark, Nessus, Burp Suite, OWASP ZAP, Splunk, Microsoft Sentinel & Defender, AWS Security Hub
Prepares you for
- CompTIA Security+
- ISC2 Certified in Cybersecurity (CC)
- Microsoft SC-900
- CompTIA CySA+ (next step)
Career paths
SOC Analyst, Cybersecurity Analyst, Junior Security Engineer, GRC Analyst, Vulnerability Analyst, IT Security Administrator
What you’ll gain
Data Protection · Business Continuity · Reputation Management · Financial Security