Where do you want cybersecurity to take you?
Choose a structured learning path instead of guessing which disconnected course to take next. Each path is built around practitioner-led lessons, hands-on exercises, and work you can talk about in an interview and use on the job.
Our first path, GRC & Cyber Risk, has launched with Module 1 available now. Additional modules—and five new learning paths—are in development.
Learning paths
Module 1 Available
GRC & Cyber Risk
Who it is for: Aspiring GRC analysts, career changers, IT and security professionals, and students. Basic IT familiarity helps; no prior audit or legal experience is needed.
Outcome: Translate frameworks, controls, evidence, and risk into practical business decisions.
In Development
Cybersecurity Foundations
Who it is for: Learners new to the field, for whom this is the natural starting point.
Outcome: Build the vocabulary, concepts, and core technical habits that every cybersecurity role requires.
In Development
SOC & Blue Team
Who it is for: Learners focused on investigating alerts and understanding telemetry as defenders.
Outcome: Investigate alerts, understand telemetry, and develop a defender’s mindset.
In Development
Penetration Testing
Who it is for: Learners focused on ethical testing through repeatable methodology, scoping, and hands-on practice.
Outcome: Learn ethical testing through repeatable methodology, scoping, and hands-on practice.
In Development
Digital Forensics
Who it is for: Learners focused on preserving evidence and investigating incidents.
Outcome: Preserve evidence, investigate incidents, and communicate defensible findings.
In Development
AI & Cybersecurity
Who it is for: Learners focused on using AI responsibly in modern systems.
Outcome: Use AI responsibly while understanding the risks it introduces to modern systems.
Featured course: GRC in Practice: Frameworks to Decisions
Move beyond memorizing frameworks. You become the GRC analyst for Kestrel Bay Lending, a fictional consumer lending company, and work through its business activities, contracts, policies, and security evidence to build work products you can explain and defend.
Module 1: Where Obligations Come From
Available now: Module 1, Where Obligations Come From. 12 short video lessons, worked examples, a hands-on lab, and a scenario-based knowledge check, about 2 hours 41 minutes in total. You’ll finish with a completed Kestrel Bay obligations register and a leadership summary for your portfolio.
Modules 2–6 roadmap
Coming soon, module by module:
- Module 2: Frameworks as Working Tools
- Module 3: Assessing the Current State
- Module 4: Risk You Can Defend
- Module 5: Target State and Roadmap
- Module 6: Briefing Decision-Makers
Best for aspiring GRC analysts, career changers, IT and security professionals, and students. Basic IT familiarity helps; no prior audit or legal experience is needed.