Foundations & Risk
Assets, threats, vulnerabilities, trust boundaries, scope, authorization, and practical risk questions.
Not every product covers every area. Individual product pages show the exact modules included at each level.
Assets, threats, vulnerabilities, trust boundaries, scope, authorization, and practical risk questions.
Authentication, authorization, privileges, lifecycle, secrets, and account-review practices.
Exposure, segmentation, firewalls, devices, updates, administrative access, and system baselines.
Data flows, sessions, roles, configuration, shared responsibility, and modern service review points.
Classification, encryption concepts, retention, deletion, backups, and recovery dependencies.
Logs, telemetry, alert quality, timestamps, evidence readiness, and questions that support investigation.
Preparation, triage, communication, containment, recovery, and post-incident improvement.
Ownership, recurring reviews, third-party questions, remediation tracking, and improvement roadmaps.