Cyber & Systems · Career Track
Cyber Security
Investigate. Detect. Contain. Explain.
Defend real systems—from packets and endpoints to cloud and AI-enabled applications.
Advanced layer includedIndustry Edge tools and scenario-based labs beyond the recognized core. Curriculum v1.1 • Updated Jul 2026
Recognized curriculum, prerequisites, assessments, and public fees disclosed before counselling.
Industry Edge Lab includedAdvanced tools, emerging patterns, and scenario-based labs beyond the recognized core.Registration and admissions follow-up continue securely in BharatCampus ONE.
Included beyond the published curriculum
The recognized core is your foundation—not the finish line.
Every Cyber Security cohort also enters the CohortAI Industry Edge Lab: an evolving layer of advanced tool categories, emerging architecture and production patterns, and scenario-based labs. A guided counselling preview connects the most relevant capabilities to your target role, followed by a release-governed lab sequence after enrollment.
Release-governed advanced tools Emerging architecture patterns Scenario-based labs
Fit before enrollment
Who should join
B.Tech/B.E., B.Sc., BCA/MCA graduates, IT-support learners and networking beginners seeking a structured security career path.
Role pathways
Your starting point
Basic computer literacy. Networking and Linux bridge modules are included; no prior ethical-hacking experience is required.
This is not an exclusion filter. It helps us confirm whether you can start directly or would benefit from a short bridge before the cohort.Recognized core
Skills and technology stack
These employability foundations are part of the public learning promise and remain visible before registration.
Linux Windows TCP/IP Wireshark Nmap Burp Suite Community SIEM concepts Cloud IAM Bash/PowerShell basics Git
Build-first curriculum journey
8 missions. One defensible portfolio.
Mentor-led hybrid learning with 1.5-hour live instruction, all-day supervised practice access, weekly build evidence and a version-locked capstone.
M011 week · 7.5 live hours
Security foundations, ethics & lab setup
Mission 01: create a safe cyber range before touching an attack tool.
- CIA triad and security objectives
- Threat actors, attack lifecycle and common controls
- Risk, assets, vulnerabilities and impact
- Ethics, legal boundaries and responsible disclosure
Guided labBuild an isolated attacker/defender virtual lab, validate network separation and create restore checkpoints.
Portfolio evidenceLab architecture diagram, acceptable-use agreement and first risk register.
AssessmentPractical lab-safety check and short risk-analysis exercise.
M022 weeks · 15 live hours
Networking and protocols for defenders
Packet Detective: reconstruct what happened without seeing the application screen.
- OSI and TCP/IP models
- IPv4 addressing, subnetting and ports
- ARP, DNS, DHCP, ICMP and routing fundamentals
- HTTP, TLS and common application protocols
Guided labAnalyse a mixed packet capture to identify hosts, sessions, DNS activity and suspicious flows.
Portfolio evidenceProtocol map and annotated Wireshark investigation notebook.
AssessmentTimed packet-investigation challenge.
M032 weeks · 15 live hours
Linux and Windows security
Blue Team Garage: turn default installations into defensible endpoints.
- Users, groups, permissions and privilege boundaries
- Processes, services, scheduled tasks and persistence
- Linux logs, Windows Event Logs and audit policy
- Bash, PowerShell and safe administration
Guided labHarden paired Linux and Windows hosts, generate audit evidence and investigate a persistence simulation.
Portfolio evidenceEndpoint hardening checklist and before/after evidence pack.
AssessmentConfiguration review plus log-based investigation.
M042 weeks · 15 live hours
Vulnerability assessment and hardening
Risk Triage Room: decide what must be fixed first when everything looks critical.
- Reconnaissance and asset discovery
- Port and service enumeration
- CVE, CVSS and exploitability context
- Vulnerability scanning and false-positive validation
Guided labScan a controlled multi-host environment, validate findings and create a risk-prioritised remediation plan.
Portfolio evidenceClient-style vulnerability assessment report with evidence and remediation SLA.
AssessmentFinding validation viva and report-quality rubric.
M053 weeks · 22.5 live hours
Web application security and OWASP
Break–Fix–Prove: exploit a flaw, patch it and demonstrate the control.
- HTTP requests, sessions and browser security
- Authentication, authorisation and access control
- Injection and insecure data handling
- Cross-site scripting, CSRF and SSRF concepts
Guided labTest a deliberately vulnerable web application, document exploit paths and verify remediations.
Portfolio evidenceWeb security test report and secure-coding remediation notes.
AssessmentHands-on web assessment with evidence capture.
M062 weeks · 15 live hours
SOC, SIEM and incident response
SOC Shift: manage a live alert queue without losing the incident story.
- Security log sources and event normalisation
- SIEM searches, correlations and use cases
- Alert triage and case management
- MITRE ATT&CK mapping
Guided labTriage a simulated multi-stage incident, build a timeline and recommend containment actions.
Portfolio evidenceSOC case file, incident timeline, ATT&CK map and executive summary.
AssessmentBlue-team simulation scored on accuracy, speed and communication.
M072 weeks · 15 live hours
Cloud, IAM and DevSecOps fundamentals
Secure Delivery Gate: stop a risky release while preserving developer velocity.
- Cloud shared-responsibility model
- Identity, roles, least privilege and secrets
- Cloud network controls and logging
- Container and image security basics
Guided labSecure a sample cloud-hosted application pipeline with identity, secret and dependency controls.
Portfolio evidenceCloud security review and DevSecOps control matrix.
AssessmentThreat-model review and pipeline security demonstration.
M082 weeks · 15 live hours
Capstone, reporting and interview simulation
Cyber Defence Demo Day: defend every decision in front of a mock security review board.
- Scope and rules of engagement
- Attack simulation and evidence collection
- Detection, containment and recovery
- Technical report and executive communication
Guided labComplete a team-based breach investigation across endpoint, network, web and cloud evidence.
Portfolio evidenceVersioned capstone dossier, executive briefing, detection pack and remediation backlog.
AssessmentPanel defence, practical incident review and interview simulation.
The week feels different here
A repeatable rhythm from concept to evidence
Weekly rhythm
- 1Concept sprint and visual roadmap
- 2Guided implementation lab
- 3Independent build challenge
- 4Debug, review and production-pattern clinic
- 5Skill check, demo and learning reflection
Learner experience
CohortAI Skill Passport with milestone badges
Build-first weekly checkpoints rather than lecture-only completion
Peer demo and code/design review rituals
Mentor office hours and all-day practice-lab access
Capstone Demo Day with a business narrative, technical walkthrough and interview-style defence
Responsible AI-assisted learning policy: explain, verify and own every submitted artifact
Interview-ready proof
What you will be able to show—not merely claim
These are tangible outputs you can demonstrate, explain, and defend through a technical walkthrough, business narrative, or interview conversation.
Hardened attacker/defender lab with a security baseline
Vulnerability assessment and remediation report
Detection rules, incident timeline and SOC case notes
Blue-team capstone with executive and technical reports
Transparent evaluation
How your progress is assessed
Completion standard
Minimum 70% overall, mandatory capstone pass, at least 80% lab submissions and versioned portfolio evidence.
CohortAI Industry Edge Lab
Your published curriculum is the foundation. The Industry Edge is what keeps it moving forward.
The Emerging Defence Lab explores modern adversary mapping, AI-application risks, software-supply-chain trust and cloud attack paths through release-governed scenarios.
Your counselling preview connects relevant capability categories to your target role. The complete release-governed lab sequence becomes part of the enrolled learning plan.Version-controlled learning promise
CYBER-SECURITY@1.1.0
Released 24 July 2026 under catalog CAT-2026.09.1. This page presents the approved curriculum, learner outcomes, duration, and public fee for informed comparison.
Straight answers
Frequently asked questions
Who is the Cyber Security program designed for?
B.Tech/B.E., B.Sc., BCA/MCA graduates, IT-support learners and networking beginners seeking a structured security career path.
What prerequisites do I need?
Basic computer literacy. Networking and Linux bridge modules are included; no prior ethical-hacking experience is required.
What is included in the public curriculum?
The public curriculum includes the recognized stack, all 8 module themes, guided labs, portfolio artifacts, assessment model, duration, and public fees. The Industry Edge Preview explains how advanced capability categories extend this foundation for your target role.
Where do counselling and enrollment happen?
CohortAI supports public discovery and program comparison. Registration, consent, counselling follow-up, application updates, and enrollment are managed securely in BharatCampus ONE.