Internship field
Cybersecurity
A practical four-week cybersecurity track covering security basics, risk assessment, defensive controls and an incident-response case study.
Week 1 — Security foundations
Understand the security landscape and common threats.
Objectives
- CIA triad
- Threats
- Basic controls
Tasks (3)
- 10 pts
1. Security glossary
Create a glossary of 25 essential security terms with examples.
Deliverable: PDF.
- 15 pts
2. Threat map
Map common threats against a sample organisation and explain likely impact.
Deliverable: PDF.
- 15 pts
3. Security checklist
Create a 20-point baseline security checklist for a small business.
Deliverable: PDF.
Week 2 — Risk and threat modeling
Identify what can go wrong and how to reduce risk.
Objectives
- Assets
- Threat actors
- Mitigations
Tasks (3)
- 10 pts
1. Asset inventory
Create an asset inventory and classify assets by sensitivity.
Deliverable: Spreadsheet.
- 20 pts
2. Threat model
Build a simple threat model for a web application using a diagram.
Deliverable: PDF or image.
- 20 pts
3. Risk register
Create a risk register with likelihood, impact, owner and mitigation for 10 risks.
Deliverable: Spreadsheet.
Week 3 — Defensive security
Design practical defensive controls.
Objectives
- Access control
- Network defence
- Monitoring
Tasks (3)
- 15 pts
1. Access policy
Draft an access-control and password policy for a small organisation.
Deliverable: PDF.
- 20 pts
2. Network controls
Design a basic secure network layout and label firewall, segmentation and monitoring controls.
Deliverable: Diagram.
- 20 pts
3. Security monitoring
Define 10 useful security events to monitor and explain the response to each.
Deliverable: PDF.
Week 4 — Incident response
Final projectHandle a simulated security incident from detection to lessons learned.
Objectives
- Triage
- Containment
- Reporting
Tasks (3)
- 20 pts
1. Incident timeline
Analyse a simulated breach and build a chronological incident timeline.
Deliverable: PDF.
- 25 pts
2. Response plan
Write containment, eradication and recovery steps for the incident.
Deliverable: PDF.
- 25 pts
3. Post-incident report
Produce a final report with root cause, evidence, impact and preventive actions.
Deliverable: PDF.