Palo Alto NetSec Professional: What Prisma Access Is For
A consulting firm once secured remote users by sending every VPN connection back to its main office. As employees travel and the…
Read articleSECURITY & GOVERNANCE
Cybersecurity
Learn practical security operations, identity, threat defense, assurance, incident response and governance.
Security involves different kinds of evidence at different levels. An analyst investigating an intrusion needs timelines, indicators and defensive telemetry; an architect needs a coherent approach to trust boundaries and identity; a governance specialist must judge whether controls are effective and risk decisions can be defended.
CompTIA Security+ (SY0-701) covers broad security foundations, while CISSP addresses a wider security-management and architecture perspective. ISACA CISA approaches many of the same organizational systems from an audit and assurance standpoint. These distinctions are more useful than treating every cybersecurity certification as interchangeable.
CURATED FROM THE EDITORIAL LIBRARY
Explore the articles
Carefully selected articles on the technologies, roles and concepts that shape this subject.
Palo Alto NetSec Professional: NGFW Policy Fundamentals
An office firewall allows employees to reach the internet, and the help desk reports that a new collaboration application cannot connect. An…
Read articlePalo Alto NetSec Professional: Choosing the Right Security Control
A mid-sized business buys a next-generation firewall to protect its headquarters. Six months later, most employees work from home, business applications run…
Read articlePalo Alto NGFW Engineer: Panorama Operations Without Configuration Drift
A company manages a dozen firewalls using a central Panorama deployment. Headquarters creates a security rule, but the branch firewall continues behaving…
Read articlePalo Alto NGFW Engineer: Policy Objects and Threat Profiles
A security team reviews a firewall rule that permits traffic to a sensitive application. The source group includes several servers that no…
Read articlePalo Alto NGFW Engineer: Security Policy That Matches Real Applications
A university discovers that a newly deployed file-sharing application works on campus but fails for remote staff. An administrator sees a broad…
Read articleMicrosoft SC-100: Security Architecture Across Multiple Clouds
An enterprise acquires a company that runs most services in AWS while its existing business relies on Azure and Microsoft 365. Both…
Read articleMicrosoft SC-100: Building Security Operations Into the Design
A security team has an endpoint product, a cloud monitoring system, and hundreds of detection rules. During a ransomware incident, analysts still…
Read articleMicrosoft SC-100: Designing Identity Security Across the Estate
A global organization uses Microsoft Entra ID for employee access, runs legacy applications in a data center, and has automation accounts in…
Read articleMicrosoft SC-100: Making Zero Trust an Architecture
A company has invested in multifactor authentication, endpoint protection, and cloud logging. Its leadership announces that the environment is now ‘Zero Trust.’…
Read articleCompTIA PenTest+ PT0-003: Reporting Findings That Get Fixed
The most technically impressive penetration test can fail its client if the report is confusing, overstated, or impossible to act on. A…
Read articleCompTIA PenTest+ PT0-003: Web and API Security Testing
An application’s visible pages are only one part of its security boundary. Mobile clients, single-page applications, background integrations, and partner systems may…
Read articleFURTHER EXPLORATION
Other perspectives
Explore related disciplines across the editorial library.
Understand the subject. Connect it with a meaningful next step.
All Insights