This course introduces students to cybersecurity fundamental topics that are essential for other diploma’s courses. It introduces cybersecurity terminologies and gives a quick overview of the CIA triad, the usability triangle, The Bell-La Padula Model, Biba model, basic coverage of security attack vectors, threat actors, Pyramid of Pain, Identification and prevention frameworks such as Cyber Kill Chain, phases of attacks frameworks such as the Unified Kill Chain, the Diamond model & MITRE. It offers overview of basic networking concepts, types of networks, and networking devices, underpinned by a dive into the OSI and TCP/IP models. In addition, it covers basic operating systems concepts. On a practical level, the course covers scripting languages useful for other courses such as Python, Linux terminal and BASH scripting, Windows Command line usage and PowerShell.

This course covers threats, attacks and vulnerabilities. The objectives of this course are to ensure that students can understand and explain different types of security compromises, the types of actors involved, and the concepts of penetration testing and vulnerability scanning.

This course provides an overview of encryption techniques. It covers block ciphers and the data encryption standard, advanced encryption standard, confidentiality using symmetric encryption, public-key cryptography, key management, hash and MAC algorithms, digital signatures, and authentication applications. It also provides hands on labs to be applied for the cryptography concepts learned in relation to cybersecurity.

This course provides an in-depth understanding of the fundamentals of information security and introduces a structured approach to managing security through the implementation of an Information Security Management System (ISMS) based on the ISO/IEC 27001 standard.

Learners will gain familiarity with essential terminology and concepts, examine the key provisions of the ISO/IEC 27001 framework, and understand their alignment with the Plan-Do-Check-Act (PDCA) methodology.

The course emphasizes experiential learning through hands-on activities, case studies, and real-world projects. Students may engage in exercises such as conducting risk assessments, developing organizational security policies and programs, and participating in simulated incident response scenarios. By the end of the course, learners will be equipped with both theoretical knowledge and practical skills to contribute effectively to information security management.

This course focuses on creating Network Administrators who are trained on protecting, detecting and responding to threats on the network. It covers the fundamentals of creating a secure networking environment using firewalls (traditional and next-generation), IDS, IPS, VPNs. Students will know how to use standard security tools to locate and fix security leaks in a computer network and will understand a variety of cryptographic algorithms and protocols underlying network security applications.

This course introduces the fundamentals of ethical hacking and penetration testing, focusing on the essential phases of an attack and their corresponding defenses. Students learn the core techniques of reconnaissance and Open-Source Intelligence (OSINT), enumeration and network scanning, followed by practical exploitation and post-exploitation methods using many common tools. The course provides hands-on exercises and labs with real-world examples and scenarios in a controlled lab environment, where students set up a hacking workspace using Kali Linux and practice against dedicated victim virtual machines. The course culminates in a Capture the Flag project.

This course covers advanced topics in network security such as network virtualization security, cloud and wireless network security and network/traffic indicators of compromise, attacks and exposures. This course also explores the necessary tools, techniques, and concepts of threat intelligence and incident response. It addresses both emerging technologies and research topics.

This course is a continuation of Ethical Hacking I, focusing on advanced techniques and attack vectors not covered in the introductory course. It provides an in-depth exploration of web and database attacks, including SQL injection, command injection, Cross-Site Scripting (XSS), Insecure Direct Object references (IDOR) and many other vulnerabilities. Students will also learn advanced post-exploitation techniques such as advanced privilege escalation, persistence mechanisms and methods for covering tracks. A dedicated module addresses network redirection, traffic manipulation, session hijacking and Denial-of-Service (DoS) attacks. The course expands on the tools introduced in Ethical Hacking I while introducing a broader set of utilities and frameworks used by professional penetration testers. The course culminates in a Capture the Flag project.