Covers identification, authentication, and authorization concepts, including access control models and mechanisms. 

Focuses on the OSI model, protocols, network components, and infrastructure-level security controls. 

Examines secure communication channels, transmission security, and methods to protect data in transit. 

Introduces governance, compliance, risk management, and core principles of security frameworks. 

Details asset classification, data valuation, policy development, and security responsibilities within an organization. 

Discusses application security controls, secure software development practices, and data protection techniques. 

Covers malware types, application-level vulnerabilities, and software exploitation methods. 

Provides an overview of cryptographic principles, symmetric encryption techniques, and secure data storage.

Explores asymmetric encryption, digital certificates, certificate authorities, and PKI implementation. 

Introduces secure system architecture, hardware security, and trusted computing principles. 

Covers formal security models, confidentiality and integrity models, and multilevel security frameworks. 

Explores administrative controls, HR security policies, onboarding/offboarding, and organizational procedures.

Teaches auditing processes, logging best practices, and continuous monitoring to ensure compliance. 

Details planning methodologies to ensure operations can continue during and after disruptions. 

Covers procedures for recovering systems and data following a disaster, with emphasis on recovery objectives. 

Provides insight into legal frameworks, cybercrime laws, digital investigations, and evidence handling. 

Explores incident management procedures, ethical decision-making, and codes of professional conduct. 

Examines facility protection, environmental controls, and physical entry safeguards.