Cybersecurity carrer and scope in its field
- 1. Cybersecurity Introduction to Cybersecurity Domains & Career Opportunities Cybersecurity is a broad and multifaceted field that encompasses various domains and career opportunities. It involves the protection of digital assets, including data, systems, and networks, from unauthorized access, theft, and disruption. This introduction will provide an overview of the key cybersecurity domains and the diverse career paths available in this dynamic industry.
- 2. What is Cybersecurity? 1 A Broad Term Cybersecurity is a broad term that encompasses many areas, also known as Information Security. 2 Protecting Digital Assets It refers to the aspects of risk to individuals and businesses from online threats and the defense/protection against those threats. 3 Threats Steal Data or Money Cybersecurity is essential to protect against threats that steal data or money from individuals and organizations. 4 Diverse Domains Cybersecurity includes various 'domains' or sub-categories that cover different aspects of digital asset protection.
- 3. Cyber Security Domains & Career Opportunities Identity and Access Mgmt Responsible for managing user identities, authentication, and access control to ensure only authorized individuals can access sensitive information and systems. Risk, Policy, Audits Evaluates an organization's infrastructure and processes to ensure compliance with industry standards and regulations, and implements policies to mitigate risks. VA / PT Conducts vulnerability assessments and penetration testing to identify and address security weaknesses in applications and infrastructure.
- 4. Introduction to Cybersecurity Data == Money! A very broad term, cybersecurity is simply not just 'one thing'! Also known as Information Security, it refers to aspects of risk to individuals and businesses from (online) threats and the defence/protection against those. Threats Steal Data or Money Cybersecurity is essential to protect against threats that steal data or money from individuals and organizations. Diverse Domains Cybersecurity includes various 'domains' or sub-categories that cover different aspects of digital asset protection.
- 5. The Basics 1 Cybersecurity A.K.A. Information Security Cybersecurity, also known as Information Security, is a broad term that encompasses many areas of protecting digital assets from cyber threats. 2 Data == Money The primary reason for information security is to protect data and money from being stolen by cyber threats. 3 Information Security Foundation The foundation of information security is the practice of protecting an organization's digital assets from cyber threats.
- 6. Cybersecurity Domains Identity and Access Mgmt Manages user identities, authentication, and access control. Risk, Policy, Audits Evaluates infrastructure for compliance and implements policies to mitigate risks. VA / PT Conducts vulnerability assessments and penetration testing. Vuln Research Finds vulnerabilities in systems and applications.
- 7. Cybersecurity Domains Identity and Access Manages user identities, authentication, and access control. Offensive Cyber Builds offensive cyber capabilities for targeted threats and nation-state attacks. Risk, Policy, Audits Evaluates infrastructure for compliance and implements policies to mitigate risks.
- 8. Cyber Security sub-categories Identity and Access Identity management, Authentication, Access Control Example: 2-Factor or Single Sign-on Risk and Compliance Evaluate infrastructure for Standards such as CIS, NIST , PCI-DSS Example: RBI Cybersecurity guidelines for banks VA / PT Security testing of infrastructure and applications Example: Web Application Security – OWASP Top 10 Vuln Research Find vulnerabilities in Systems and Applications Example: Log4Shell
- 9. Cyber Security sub-categories Threat Protection / Intelligence Malware and vulnerability analysis, threat protection, detection, response and research. Example: Endpoint Protection (Anti-virus). Cloud Security Identify issues in cloud deployments and configurations, secure execution environment. Industrial Control System (ICS / IIOT) Security Assess vulnerabilities and protect industrial control systems and IoT devices. Offensive Cyber Build offensive cyber capabilities for targeted threats and nation-state attacks. Example: Stuxnet.