Cybersecurity fundamentals to identity and endpoint security
Start with core security principles, then focus where most real-world attacks begin and end: accounts and devices.
- Who it's for
- IT staff who want to move towards security, and anyone who wants to understand why identity and endpoint controls matter.
- Start with
- Comfortable with basic IT concepts. The networking and Microsoft 365 paths make good companions.
- Pace
- Self-paced. Concepts first, then simulations, then practice in a test environment.
The route
0 of 5 marked done
Core principles
Least privilege, defence in depth, and how frameworks organise security work.
Practice: Map three controls you use at work to the functions of the NIST Cybersecurity Framework.
Zero Trust in practice
Verify explicitly, use least-privilege access, and assume breach.
Practice: Explain how a Conditional Access policy applies each Zero Trust principle.
- Zero Trust overviewMicrosoft Learn
Identity is the new perimeter
MFA, blocking legacy authentication, risk-based access and emergency access accounts.
Practice: Use the simulated tenant to show why blocking legacy authentication matters.
- Read a sign-in like an admin: Conditional Access decisionsByteStranger lab, interactive
Healthy devices only
Encryption, antivirus, firewall and patch level as conditions for access.
Practice: Explain which compliance settings in the simulation reduce which risks.
- Why is this laptop blocked? Intune compliance and accessByteStranger lab, interactive
Common application risks
The categories of web application risk every IT professional should recognise.
Practice: Pick two risks from the OWASP Top 10 and find an example of each in the news.
- OWASP Top TenOWASP
By the end
- Explain core security principles and Zero Trust in plain language
- Reason about identity and device controls as layers of defence
- Talk credibly about common attack paths and their mitigations
Where to go next
This path is a guide for independent learning. It isn't accredited and doesn't award a qualification. The external resources belong to their publishers. Progress you mark is saved only in this browser.