Cybersecurity is not a collection of hacking tricks. It is the disciplined work of reducing risk, protecting systems and responding when something goes wrong.
Start with how systems work
Security practitioners need a working understanding of networks, operating systems, applications, identity and data. Without those foundations, security tools can produce alerts that a learner cannot interpret.
Core areas to understand
- Networking: IP addressing, DNS, routing, ports and common protocols.
- Operating systems: Linux and Windows basics, permissions, logs and patching.
- Identity: authentication, multi-factor authentication and least privilege.
- Risk: assets, threats, vulnerabilities, likelihood and impact.
- Defence: secure configuration, backups, monitoring and incident response.
- Forensics: evidence handling, timelines and careful documentation.
Practise safely and legally
Use intentionally vulnerable lab environments and systems you own or are explicitly authorised to test. Never scan, access or attempt to disrupt another organisation’s systems without permission. Ethical practice is part of professional competence, not an optional extra.
Build a defensive portfolio
Document a home-lab network, write a basic hardening checklist, analyse sample logs or produce an incident-response playbook. Explain the risk you identified and how you would verify that a control works.
Explore the Excel EDGE cybersecurity course and ask admissions about the current syllabus and practical lab environment.
Further reading
- NIST Cybersecurity Framework — a risk-based framework for managing cybersecurity.
- CISA Secure Our World — practical guidance on everyday cyber hygiene.