Cybersecurity, learned like a practitioner.
24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.
Latest modules
Most recent practitioner playbooks across every track. Filter by topic, level, or search in the sidebar.
Cyber Crime Investigation in India — Working with Cybercrime Cells
Why this module exists. Most cyber incidents an enterprise reports do not result in successful prosecution. Sometimes that is because the attacker is offshore; often it is because evidence was not preserved correctly, or the FIR was filed under the wrong sections, or the cybercrime cell was not engaged early enough. This module is the […]
Indian Evidence Act Section 65B — Electronic Evidence Admissibility
Why this module exists. The most-common reason cyber cases collapse in Indian courts is not investigation failure — it is evidence inadmissibility for want of a proper Section 65B certificate. This module covers what the section requires, what the Supreme Court has said in landmark judgments, and how to prepare evidence so it survives challenge. […]
CERT-In 2022 Directions — The 6-Hour Reporting Reality
Why this module exists. Three years on, most Indian enterprises are still uncertain about which CERT-In Directions apply to them, what counts as a reportable incident, and what the reporting workflow looks like. This module is the operational answer. What the Directions actually require Time synchronisation to NTP servers run by NIC or NPL (or […]
DPDP Cross-Border Data Transfer and the Negative List
Why this module exists. The cross-border-transfer regime under DPDP is materially different from what came before (the Section 43A regime under IT Act). Practitioners are unsure whether to act, when, and on what. This module covers the law as written, the gaps, and the defensible position. The framework — what DPDP actually says DPDP Act […]
IT Act 2000 — Practitioner Section Reference
Why this module exists. Indian security practitioners are routinely asked “is this a Section 66 case or a Section 43A case?” or “can we file an FIR or is this just a civil matter?” The answers depend on details of the IT Act that are not always intuitive. This module covers the structure and the […]
Risk Treatment — Mitigate, Transfer, Accept, Avoid
Why this module exists. A risk register that produces no closed risks is a registry, not a programme. The treatment lifecycle is what converts identified risk into reduced exposure. This module covers the four options, the decision logic, and the operational mechanics. The four treatment options Option When appropriate Documentation requirement Mitigate Cost-effective control reduces […]
Third-Party and Supply-Chain Risk Management
Why this module exists. The threat model has shifted. The hardest perimeter to defend now is your vendors’ perimeter. This module is the practitioner programme: how to tier, assess, monitor, and respond. The tiering — start here Not every vendor needs the same scrutiny. Categorise based on data sensitivity, access level, and operational dependency: Tier […]
Qualitative Risk Assessment — ISO 27005 / NIST 800-30 Done Well
Why this module exists. Done well, qualitative risk assessment is cheap, repeatable, and good enough for 90% of decisions. Done badly, it is theatre. The difference is in the scoring rigour, not the framework choice. What ISO 27005 and NIST SP 800-30 actually prescribe Both frameworks define a process: identify assets, identify threats, identify vulnerabilities, […]
Building a Risk Register That Drives Decisions
Why this module exists. Every Indian enterprise has a risk register. Few have one anyone uses to decide what to fund. The difference is in the operating model around the register, not the spreadsheet template. This module covers the operating model. What a working risk register actually does Drives the quarterly budget conversation — “what […]
Quantitative Risk Analysis with FAIR
Why this module exists. Boards make decisions in money. Heat maps in red, amber, green do not translate to “should we spend ₹2 Cr on this control?” FAIR translates. This module is the operational introduction. The FAIR ontology — the building blocks FAIR decomposes “risk” into measurable components: Loss Event Frequency (LEF) — how often […]
Practitioners who've
shipped the controls.
Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.
Why learn here
Practitioner-written.
Each lesson is authored by someone who has shipped the control or run the engagement in production.
Quiz after every module.
20+ questions with explanations. 70%+ to mark complete. Unlimited retries.
Progress tracked.
Completions, scores and streaks saved automatically. Resume exactly where you left off.
India-priced.
Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.