Cybersecurity Fundamentals - Study
Guide
Threats, cryptography, network defence, OWASP web risks and incident
response - exam-ready
Complete Study Guide | Key Concepts | Examples | Practice Questions
, 1. The Security Mindset
Security starts with models: what you protect, from whom, and at what cost. The CIA triad plus risk thinking frames
every topic.
- CIA triad: Confidentiality (only authorised access), Integrity (no tampering), Availability (systems stay up).
- Threat modelling: identify assets, attackers, attack paths, then prioritise defences.
- Risk = likelihood x impact; you manage risk, never eliminate it.
- Attack vectors: phishing (still #1), unpatched software, weak passwords, misconfigurations.
- Zero trust: never trust, always verify - even inside the network.
Page 1
Guide
Threats, cryptography, network defence, OWASP web risks and incident
response - exam-ready
Complete Study Guide | Key Concepts | Examples | Practice Questions
, 1. The Security Mindset
Security starts with models: what you protect, from whom, and at what cost. The CIA triad plus risk thinking frames
every topic.
- CIA triad: Confidentiality (only authorised access), Integrity (no tampering), Availability (systems stay up).
- Threat modelling: identify assets, attackers, attack paths, then prioritise defences.
- Risk = likelihood x impact; you manage risk, never eliminate it.
- Attack vectors: phishing (still #1), unpatched software, weak passwords, misconfigurations.
- Zero trust: never trust, always verify - even inside the network.
Page 1
