Knowledge & Understanding Explain core cybersecurity principles (CIA triad, threat models, attack surfaces). Classify common cyber threats (malware, phishing, DDoS, SQLi) and their mitigations. Summarize compliance standards (GDPR, HIPAA) and risk management frameworks (NIST, ISO 27001). Technical Skills Configure and secure networks (firewalls, VPNs, IDS/IPS) using tools like PfSense or Snort. Implement encryption (AES, RSA) and PKI for data protection. Conduct vulnerability assessments with Nessus/OpenVAS and prioritize risks. Perform ethical hacking (penetration testing) using Metasploit, Burp Suite, and Kali Linux. Analyze logs with SIEM tools (e.g., Splunk) to detect intrusions. Practical Abilities Develop a risk assessment report for an organization. Create an incident response plan for ransomware/breach scenarios. Demonstrate digital forensics (evidence collection, analysis with FTK/Autopsy). Career Readiness Build a portfolio with: Penetration test reports. Network hardening documentation. Mock incident response exercises. Prepare for industry certifications (CompTIA Security+, CEH) via practice exams.