Cyberbits

  • Passing the CompTIA Security+ exam

    Introduction After a couple of weeks of studying, which I covered in the last few posts, I passed CompTIA Security+ last June (I schedule my posts, so dates don’t line up). Going by exam day alone, I’m not sure how. Checking in About a decade ago, I studied for quite a few CompTIA exams, and…

  • Security+ Governance, Risk, and Compliance

    Introduction Last in this series! As you know by now, I’ve been working through the CompTIA Security+ curriculum these last few weeks. It has a lot of overlap with the Google Cybersecurity series I did earlier this year, but it’s all interesting interesting nevertheless. Here’s what module 4 (Cybersecurity Governance and Compliance) covers, distilled into…

  • Security+ Cybersecurity operations and controls

    Introduction I spent a chunk of this week working through the operations and controls section of my CompTIA Security+ studies, and although the AI voice-over is annoying the f#ck out of me, it has some interesting material. Quick disclaimer: it has a lot of overlap with the Google Cybersecurity series I did earlier this year,…

  • Security+ Cybersecurity threats and defense

    Introduction I’ve been working through the CompTIA Security+ curriculum and the second module, Cybersecurity Threats and Defense, covers more ground than I expected. It starts with the attack landscape and works its way through malware, physical intrusions, network exploitation, application vulnerabilities, detection techniques, defense architecture, and data security. Although it has a lot of overlap…

  • Security+ Information security foundations

    Introduction I’ve been working through the CompTIA Security+ curriculum lately, starting with the information security foundations module. It covers a lot of ground, from the basics of the CIA triad all the way through to zero-day vulnerabilities and defensive monitoring. Rather than let those notes rot in a folder, I figured I’d write them up…

  • Google’s Cybersecurity AI module

    Introduction As promised last week, today I’ll cover the Artificial Intelligence (AI) module that was added to the Google’s Cybersecurity Professional Certificate program. Although it’s a bit basic, this module, being part of a cybersecurity course, got me thinking. I ended up on YouTube, and did some research. I found out that cybersecurity deals/has to…

  • Google’s Detection and Response

    Introduction Following up on my Google’s Cybersecurity Professional Certificate quest, I’ll share the cliff notes of the courses as I go through them. Dense summaries of what actually matters. Today: Sound the Alarm: Detection and Response From alert to recovery Security operations center around a four-phase cycle (from the NIST Incident Response Lifecycle): This framework…

  • Google’s Assets, Threats, and Vulnerabilities

    Introduction I’m tackling the Google’s Cybersecurity Professional Certificate and I’ll share cliff notes on the courses I take. Dense summaries of what actually matters. Today Assets, Threats, and Vulnerabilities of this Google security path. Risk, assets and the CIA triad Security starts with three non-negotiable pillars that we’ve covered before: confidentiality, integrity, and availability (the…

  • Google’s Manage Security Risks

    Introduction As previously said, I’m tackling Google’s Cybersecurity Professional Certificate and I’ll share the cliff notes as I go. Dense summaries of what actually matters. Today: Play It Safe: Manage Security Risks Security domains and risk management Security teams organize their work across eight critical domains, ranging from governance (Security and Risk Management) to hands-on…

  • Google’s Foundations of Cybersecurity

    Introduction Years of platform engineering gave me the infrastructure fundamentals, and beyond; now I’m retooling for security. I’m tackling Google’s Cybersecurity Professional Certificate first (CompTIA Security+ next), and I’ll share the cliff notes as I go. Dense summaries of what actually matters. Kickoff: Google Foundations of Cybersecurity. Analysts and engineers Analysts man the walls, monitoring…