Cybersecurity, learned like a practitioner.
24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.
Latest modules
Most recent practitioner playbooks across every track. Filter by topic, level, or search in the sidebar.
Surveillance, Visitor Management, and Physical Incident Response
Why this module exists. Most Indian enterprises have CCTV; few have CCTV that catches anything before-the-fact. The difference is in coverage planning, retention discipline, and integration with the SOC. This module covers what works. CCTV coverage — where to place cameras The principle: cover every transition between zones and every high-value asset. Practitioner placement list: […]
Data Centre Physical Security — Tier Standards, Cages, NCIIPC
Why this module exists. Whether you operate your own data centre or rent rack space, understanding data-centre security standards is the prerequisite to evaluating whether a facility actually protects your equipment. This module is the framework. The Uptime Institute Tier classification Tier Uptime guarantee Redundancy Tier I 99.671% (28.8h downtime/yr) No redundancy Tier II 99.741% […]
Access Control Systems — Cards, Biometrics, PINs
Why this module exists. The badge that lets your employee into the building is often the only thing between an attacker and a network port in the lobby. The technology choice and operational discipline of access control determines whether the building is a perimeter or a suggestion. The card-technology generations Technology Cloneability Recommendation Magstripe Trivial […]
Cyber Crime Investigation in India — Working with Cybercrime Cells
Why this module exists. Most cyber incidents an enterprise reports do not result in successful prosecution. Sometimes that is because the attacker is offshore; often it is because evidence was not preserved correctly, or the FIR was filed under the wrong sections, or the cybercrime cell was not engaged early enough. This module is the […]
Indian Evidence Act Section 65B — Electronic Evidence Admissibility
Why this module exists. The most-common reason cyber cases collapse in Indian courts is not investigation failure — it is evidence inadmissibility for want of a proper Section 65B certificate. This module covers what the section requires, what the Supreme Court has said in landmark judgments, and how to prepare evidence so it survives challenge. […]
CERT-In 2022 Directions — The 6-Hour Reporting Reality
Why this module exists. Three years on, most Indian enterprises are still uncertain about which CERT-In Directions apply to them, what counts as a reportable incident, and what the reporting workflow looks like. This module is the operational answer. What the Directions actually require Time synchronisation to NTP servers run by NIC or NPL (or […]
DPDP Cross-Border Data Transfer and the Negative List
Why this module exists. The cross-border-transfer regime under DPDP is materially different from what came before (the Section 43A regime under IT Act). Practitioners are unsure whether to act, when, and on what. This module covers the law as written, the gaps, and the defensible position. The framework — what DPDP actually says DPDP Act […]
IT Act 2000 — Practitioner Section Reference
Why this module exists. Indian security practitioners are routinely asked “is this a Section 66 case or a Section 43A case?” or “can we file an FIR or is this just a civil matter?” The answers depend on details of the IT Act that are not always intuitive. This module covers the structure and the […]
Risk Treatment — Mitigate, Transfer, Accept, Avoid
Why this module exists. A risk register that produces no closed risks is a registry, not a programme. The treatment lifecycle is what converts identified risk into reduced exposure. This module covers the four options, the decision logic, and the operational mechanics. The four treatment options Option When appropriate Documentation requirement Mitigate Cost-effective control reduces […]
Third-Party and Supply-Chain Risk Management
Why this module exists. The threat model has shifted. The hardest perimeter to defend now is your vendors’ perimeter. This module is the practitioner programme: how to tier, assess, monitor, and respond. The tiering — start here Not every vendor needs the same scrutiny. Categorise based on data sensitivity, access level, and operational dependency: Tier […]
Practitioners who've
shipped the controls.
Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.
Why learn here
Practitioner-written.
Each lesson is authored by someone who has shipped the control or run the engagement in production.
Quiz after every module.
20+ questions with explanations. 70%+ to mark complete. Unlimited retries.
Progress tracked.
Completions, scores and streaks saved automatically. Resume exactly where you left off.
India-priced.
Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.