fundamentals
a. definitions
b. core ideas
i. GRC
- security culture
- budget
- man power
ii. CIA triad
iii. security in depth + zero trust security vs castle method
iv. assume compromise
v. assessing threats
- threat actors
vi. threat modeling
vii. risk analysis
viii. mitigating risk