Cybersecurity

This is a defensive security course. The goal is to make you the person who keeps an organisation's systems and data safe, and the material is framed accordingly throughout.

You cover the threat landscape — phishing, malware, ransomware, credential attacks and social engineering — so that you understand what you are defending against. From there the focus is entirely on defence: hardening systems, access control and least privilege, patching, network segmentation, logging and monitoring, backup strategy and incident response.

Legal and ethical boundaries are covered explicitly, including Kenya's Computer Misuse and Cybercrimes Act and the Data Protection Act. Testing techniques are practised only in the course's own isolated lab environment, and only with written authorisation in professional work — the course makes that standard non-negotiable.