My list of useful online learning resources on Cyber Security


                           In order to stay updated and aware of the latest happening in InfoSec space it is essential to continuously update your knowledge  through learning. Attending conferences physically has its distinct advantages of learning and networking both. However  it is not always possible for busy professionals to attend the same.Most of this knowledge is acquired through various sources. In this blog I will jot down the various online sources of which I have used to update my knowledge in this field. Virtual conferences , On demand courses and webinars are the various ways which I have used to enhance my knowledge and skills. I will now list  down the specific resources I have used over the last two years to upgrade my knowledge of various areas of Cyber Security.


  1. Cybrary -   It is an online repository of free courses covering a vast range of  topics. The courses are also supplemented by paid labs for actual practice on the skills learned. There are also webinars on various products in the InfoSec Space. I have used thsi site extensively to both learn new skills as well as prepare for certification exams.
  2. Information Security Magazine - I love this magazine for its in depth coverage of Information sEcurity topics. I feel it is one of the best resources in this field which has been able to get a right mix of technical  and business aspects of Cyber Security. Their virtual conferences, held twice a year are very informative and a great new way to attend a conference virtually.   
  3. Bright Talk Webinars - This webinar site has the single most extensive collection of webinars in varied fields. They have a huge collection of Cyber Security webinars. Recently, I listened to a very useful webinar on State of cloud Security by Gartner
  4. CSO ONLINE  - Again a very useful resource on Cyber Security specifically for CISO and Information security professionals in leadership roles. Many of its articles are thought provoking and informative
  5. Signal Magazine - Signal Magazine is the official publication of the AFCEA, a professional association focused on serving government and military since 1946. It has an online magazine, a blog, newsletters, webinars, ebooks and more. Content is primarily focused around cyber, defense, homeland security, intelligence and technology — basically everything and anything security related.  Being a veteran myself I am biased towards this magazine as they provide both a civil and military perspective of Information Security.
  6. Troy Hunt’s blog - On blogger I actively follow is Troy Hunt. From his great courses on PluralSight to his useful blog articles and the hugely successful website “Have I been Pawned” he is the person who makes Information Security look cool and hep. His content is top notch and his talsk availbale online are extremely  useful. From “Wifi Pineapple” to  Software security Troy akes everything fun to learn and implement.
  7. Plural Sight I will wrap up my list with one paid site. In a world of large number of online learning websites PluralSight stands out for the high quality of content provided. It is a must for all companies related to IT, Web development , Security and host of other fields. Great curated content. All of Troy Hunt’s courses are a must watch.

This is a just a short list of resources which I use to stay updated . Do share any more useful sites which you feel may help Cyber Security professionals in their efforts to stay updated and current.


Comments

Post a Comment

Popular posts from this blog

API Security - A risk based approach for CISOs

       APIs or Application Programming Interfaces are the building blocks of modern applications. As the usage of APIs  and API traffic increases it is likely to be the major attack vector for hackers. APIs are utilised for a variety of purposes such as - share data with partners, customers, and other third parties. As per Akamai, 83 % of internet traffic is driven by APis. While APIs are a powerful enabler of digital transformation, they also present new security challenges. In fact, Gartner predicts that in 2023, API abuses will be the most frequent attack vector. To substantiate that prediction, OWASP has come out with a separate OWASP Top 10 for APIs in 2019. Also multiple organisations such as Coinbase and IRCTC have been affected by API security vulnerabilities in their applications.  To tackle this emerging attack vector, CISOs should understand the key risks associated with APIs. These include: Data Breaches or Data Leakages -  Risk of data le...
Read more

2024 Year Review and thoughts

  My review of 2024.  The year was a mixed bag with a overall positive outlook and a few hiccups. My ratings on key parameters  Health - Average  Family - Good  Professional - Good  Career - Good  Finances - Average  Health -  My health has been a mixed bag with several notable improvements and some setbacks. Exercise - I was able to regularly attend Gym and do strength training.  Due to improved leg strength I was able to run a 10 k run in Dec in a time of 67 mins . I was 40th out of 120 runners in the Veteran category which I am satisfied with keeping in mind the several issues I had been having at the start of the year.  Gut Health : My stomach and gut issues continued which led me to a take a nutritionist led meal plan. This has helped but I still continue to have gas and loose motions intermittently  and outside food does not suit me at all. The worry is that my weight has reduced from 68 Kg to 63 Kg in las...
Read more

Key Steps for Building an Effective Data Protection Program: From Analysing Business Needs to Ongoing Protection

Key Steps for Building an Effective Data Protection Program: From Analysing Business Needs to Ongoing Protection In today's world, data is often referred to as the new oil, given its immense value to organisations. Companies have access to vast amounts of data, from customer information to intellectual property and strategic plans.  Over the last decade cyber criminals have targeted organisations repeatedly related to multiple breaches. Some organisations like Uber have faced multiple breaches and even government organisations are not spared as we observed in the Snowden case where confidential data of US  govt was leaked online. Protecting this data has become essential, and having an effective data protection program is crucial to achieving this requirement.  In my role as a CISO for the last five years I have found data protection as the most complex initiative yet most closely related to business enablement. This can be related to protecting customer data to prevent c...
Read more