Modern computer systems are almost universally connected, which creates wider attack surfaces well beyond code to users, hardware, and more. Securing systems is thus a fundamental skill for modern software engineers.

This course is a comprehensive introduction to cyber security best practices. You’ll start with an overview of common threats and vulnerabilities, as well as high-level concepts like privilege, integrity, logging, and mediation. With these concepts in mind, you’ll then learn common protection mechanisms and defense strategies from endpoint protection to firewalls, gateways, and proxy servers. Next, you’ll learn monitoring and detection techniques, alerts, and event management. Finally, when you detect a threat, you’ll know how to respond with support tickets, data preservation, and change management.

By the end of this course, you’ll have a better understanding of modern cyber security practices and a clear roadmap to implementing these as a developer.

Cyber Security Best Practices for Developers

## Overview

Compared to alerts and events, security incidents are thankfully rare. An organization will experience many different types of security events of varying severity daily. On the rare occasion that an event is severe enough to be classified as an incident, an **incident response plan (IRP)** should be used. Criteria should be defined in advance to determine whether the event should be treated as an incident.


# Overview

Compared to alerts and events, security incidents are thankfully rare. An organization will experience many different types of security events of varying severity daily. On the rare occasion that an event is severe enough to be classified as an incident, an **incident response plan (IRP)** should be used. Criteria should be defined in advance to determine whether the event should be treated as an incident.


Learn when to classify events as incidents and how to proceed, including having an incident response plan to prepare for incidents.


Incident Response

Learn when to classify events as incidents and how to proceed, including having an incident response plan to prepare for incidents.

Introduction

Basics of Security

Detect

Protect

Respond

Conclusion

Incident Response

Overview