Architettura di cybersicurezza

• Topic 1 — The role of cybersecurity architecture and the modern threat landscape; with self-paced module 1.5, assessing the architecture you have • Topic 2 — Standards, methodologies and frameworks: ISO/IEC 27001, NIST CSF 2.0, the CIS Controls, COBIT, ITIL, SOC 2, GDPR; with self-paced module 2.5, the European regulatory landscape (NIS2, the Cyber Resilience Act, DORA) • Topic 3 — Security in the development lifecycle: requirements, threat modelling, the OWASP Top 10:2025 and specifying security in a procurement; with self-paced module 3.5, artificial intelligence in architecture work

• Topic 4 — Network security architecture: attack surface, firewalls, IDS/IPS, deception, and the compromise of edge devices; with self-paced laboratory 4.5, building the perimeter • Topic 5 — Segmentation and secure remote access, including zero trust assessed against the current research evidence; with self-paced laboratory 5.5, building a segmented network • Topic 6 — Identity and access management: access control models, phishing-resistant authentication, least privilege and privileged access; with self-paced module 6.5, the account lifecycle

• Topic 7 — Log management and security monitoring: what to log, collection architecture, integrity, retention against the reporting obligations, and detection design; with self-paced laboratory 7.5, detection in practice • Topic 8 — Vulnerability management and security testing: scoping and authorisation, and prioritisation using the KEV catalogue, EPSS and CVSS 4.0; with self-paced module 8.5, from finding to fixed • Topic 9 — Incident management: the first hour, containment trade-offs, the NIS2 and GDPR reporting clocks, and the blameless review; with self-paced module 9.5, threat intelligence and exposure awareness

• Topic 10 — Data protection and cryptography: what encryption does and does not address, the key lifecycle and escrow, secrets in the deployment pipeline, the NIST post-quantum transition timeline, and backup architecture that survives compromise of the production control plane; with self-paced module 10.5, restore assurance