Cybersecurity fundamentals — end-to-end

Foundation · All paths · SOC · AppSec · GRC

CIA triad, risk, threats, controls, and how offense informs defense.

Concept map

CIA → Controls → Detect/Respond → Improve
Threat → Vulnerability → Risk → Treatment

1. Confidentiality, integrity, availability

Map each asset (data, app, identity) to which CIA property matters most. Banking integrity+availability; PII confidentiality.

Asset list started
CIA rating per asset

2. Risk = likelihood × impact

Use qualitative scales first; tie to business owners. Risk register drives priorities.

3. Controls

Prevent (MFA, patching), detect (SIEM, EDR), respond (IR plan), recover (backups).

4. Attacker & defender mindset

Attackers chain OSINT → access → persistence. Defenders break the chain at any step. Hacking is not only offensive — blue team uses the same knowledge.

Case studies

Target breach (2013)

Third-party HVAC access led to POS compromise — supply chain + network segmentation lesson.