Cybersecurity, learned like a practitioner.
24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.
Intermediate · modules
Modules tagged Intermediate. Use the sidebar to narrow by track or topic.
Secure Destruction of Media and Hardware
Why this module exists. The data that you forgot was there is the data that becomes a breach. Every device that has ever held sensitive data is a potential exposure when retired. This module covers what to destroy, how, and how to prove it was done. The destruction-standard landscape NIST SP 800-88 Rev. 1 — […]
Environmental Controls — Power, HVAC, Fire Suppression
Why this module exists. The most-common Indian data-centre incident is not a cyber attack — it is an HVAC failure during summer, a UPS battery degradation, or a fire-suppression false trigger. Environmental controls are the practitioner’s lower-glamour, higher-frequency reality. Power — the foundation Layer Purpose Failure modes Utility power (grid) Primary supply Grid outages, surges, […]
Surveillance, Visitor Management, and Physical Incident Response
Why this module exists. Most Indian enterprises have CCTV; few have CCTV that catches anything before-the-fact. The difference is in coverage planning, retention discipline, and integration with the SOC. This module covers what works. CCTV coverage — where to place cameras The principle: cover every transition between zones and every high-value asset. Practitioner placement list: […]
Access Control Systems — Cards, Biometrics, PINs
Why this module exists. The badge that lets your employee into the building is often the only thing between an attacker and a network port in the lobby. The technology choice and operational discipline of access control determines whether the building is a perimeter or a suggestion. The card-technology generations Technology Cloneability Recommendation Magstripe Trivial […]
Cyber Crime Investigation in India — Working with Cybercrime Cells
Why this module exists. Most cyber incidents an enterprise reports do not result in successful prosecution. Sometimes that is because the attacker is offshore; often it is because evidence was not preserved correctly, or the FIR was filed under the wrong sections, or the cybercrime cell was not engaged early enough. This module is the […]
CERT-In 2022 Directions — The 6-Hour Reporting Reality
Why this module exists. Three years on, most Indian enterprises are still uncertain about which CERT-In Directions apply to them, what counts as a reportable incident, and what the reporting workflow looks like. This module is the operational answer. What the Directions actually require Time synchronisation to NTP servers run by NIC or NPL (or […]
DPDP Cross-Border Data Transfer and the Negative List
Why this module exists. The cross-border-transfer regime under DPDP is materially different from what came before (the Section 43A regime under IT Act). Practitioners are unsure whether to act, when, and on what. This module covers the law as written, the gaps, and the defensible position. The framework — what DPDP actually says DPDP Act […]
IT Act 2000 — Practitioner Section Reference
Why this module exists. Indian security practitioners are routinely asked “is this a Section 66 case or a Section 43A case?” or “can we file an FIR or is this just a civil matter?” The answers depend on details of the IT Act that are not always intuitive. This module covers the structure and the […]
Risk Treatment — Mitigate, Transfer, Accept, Avoid
Why this module exists. A risk register that produces no closed risks is a registry, not a programme. The treatment lifecycle is what converts identified risk into reduced exposure. This module covers the four options, the decision logic, and the operational mechanics. The four treatment options Option When appropriate Documentation requirement Mitigate Cost-effective control reduces […]
Third-Party and Supply-Chain Risk Management
Why this module exists. The threat model has shifted. The hardest perimeter to defend now is your vendors’ perimeter. This module is the practitioner programme: how to tier, assess, monitor, and respond. The tiering — start here Not every vendor needs the same scrutiny. Categorise based on data sensitivity, access level, and operational dependency: Tier […]
Practitioners who've
shipped the controls.
Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.
Why learn here
Practitioner-written.
Each lesson is authored by someone who has shipped the control or run the engagement in production.
Quiz after every module.
20+ questions with explanations. 70%+ to mark complete. Unlimited retries.
Progress tracked.
Completions, scores and streaks saved automatically. Resume exactly where you left off.
India-priced.
Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.