15 domains. One habit.
Every corner of cybersecurity, broken into focused categories. Peek at the questions, then build the instinct.
Access and Identity Management
IAM, PAM, Zero Trust, SSO
Network and Infrastructure Security
Firewalls, segmentation, ZTNA
Application and Data Security
OWASP, AppSec, API security
Cloud Security
AWS / GCP / Azure, CSPM, CASB
Mobile Security
MDM, MAM, BYOD, MTD
Cryptography and Secure Communications
TLS, PKI, hashing, E2EE
Threat Detection and Response
SIEM, SOAR, MITRE ATT&CK
Operational Security
OPSEC, DevSecOps, patch mgmt
Offensive Security
Pentesting, bug bounty, OSINT
Security Architecture and Design
SSDLC, microservices, ZTA
Risk Management and Compliance
GRC, ISO 27001, GDPR, HIPAA
Social Engineering and Human Factors
Phishing, pretexting, insiders
Cybersecurity Frameworks and Standards
NIST, CIS Controls, SOC 2
Privacy
Privacy by Design, GDPR, PIAs
Emerging Technologies in Cybersecurity
AI/ML, quantum, IoT, 5G